The package has a clear README, a matching repository, and no install-time scripts. Its small dependency set and MIT license reduce adoption friction, but this old one-release project offers little evidence of current support.
38%
Total Score
33
100
72
83
This is the only release, published nearly seven years ago, with no releases in the last 12 months. That leaves current compatibility and maintenance largely unverified.
There were no commits and no active maintainers during the last three months, consistent with a project that has been inactive for nearly seven years. This is a substantial abandonment concern for a framework integration package.
Only one registry maintainer is listed. For a user-owned project this is a thin support base, and the inactive release history provides no evidence of compensating capacity.
The registry namespace and repository owner match a personal user account, so there is no organizational backing shown to compensate for the single-maintainer and inactivity concerns.
The repository has zero stars and forks and one watcher, offering little community evidence or backup support. Popularity is only supporting evidence, so this reinforces rather than determines the risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lsshu/wechat Version ^1.0 | — | — |
vinkla/hashids Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.