Risky to depend on: this package has had no new release or repository activity for nearly five years. Its repository is extremely sparse and does not clearly identify or document the package, which raises abandonment and maintenance concerns.
32%
Total Score
0
69
67
The package has only one release, published nearly five years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite the stable 1.0.0 version.
The repository has had zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of ongoing maintenance.
Both the package and repository contain only three files, with no visible implementation, tests, or supporting documentation. That may be expected for a collection package, but combined with the under-construction README it provides little transparency into what consumers receive.
A README is present, but it is only 924 characters and explicitly says the project is under construction; the absence of tests and a changelog is normal for a published artifact, so the concern is limited to weak consumer documentation.
The linked repository name does not match the package name and its README does not mention this package. This makes the repository-to-package relationship unclear and weakens confidence that it is the actual source for this release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mabrouk/mediable Version ^1.0 | — | — |
mabrouk/filterable Version ^1.0 | — | — |
mabrouk/translatable Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.