Usable with caveats: it is a clearly licensed, tested, documented package with a matching source repository, but maintenance appears stalled, with no release or commit activity for nearly three years. Its very small user community and lack of a security policy add uncertainty for long-term dependence.
62%
Total Score
50
83
83
The package has 39 releases since 2021, but none in the last 12 months and its latest release was nearly three years ago. This suggests the project may be stable, but also may no longer be actively maintained.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long gap since the latest release. There is no newer activity provided to offset this maintenance concern.
The repository has only 1 star, 0 forks, and 1 watcher. Popularity is not required for a healthy small package, but these numbers provide little evidence of an active user or contributor community.
No security policy was found in the repository. That is a transparency gap for vulnerability reporting, although the repository's safe workflow and read-only token settings provide some compensating hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.