The package is small and inspectable, with repository tests, a clear MIT license, and only two runtime dependencies. Its maintenance capacity looks weak, so pinning this release should be treated as a liability for long-lived projects.
45%
Total Score
25
100
70
83
The package has had no release in about 5 years, with all four releases published on the same day in July 2021. This strongly raises abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and limited evidence of ongoing maintenance.
Only one account has registry publish access, which leaves little visible publishing redundancy for a user-owned project. This is a supporting maintenance concern rather than proof of abandonment.
The repository has 1 star, 0 forks, and 0 watchers, providing little community evidence to compensate for the lack of recent maintenance.
The repository has no security policy. For a small utility this is a hygiene gap, but it reduces transparency if vulnerabilities are discovered.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.