The package is clearly licensed, focused, and easy to identify in its matching repository. Its two-release history and more than six years without commits indicate strong abandonment risk, while the missing security policy adds a smaller transparency concern.
38%
Total Score
0
100
86
50
Only two releases exist, both from June 2020, with none in the last 12 months. This provides little evidence of ongoing maintenance for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, and its last push was in June 2020. The long inactivity materially increases abandonment risk.
The repository has no security policy. This is a transparency gap, although the package is small and the repository is otherwise clearly identified.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.