The package is small, readable, and has no install-time scripts or deprecation notice. Its lack of licensing and security documentation adds adoption risk, while the project shows no maintenance since its one 2012 release.
39%
Total Score
0
75
75
There has been only one release, published over 14 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a package developers may need to maintain or trust over time.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long-frozen release history. The repository is not archived, but it shows no current maintenance activity.
The package has no declared license, no detected license, and no license file in the artifact or repository. That leaves the legal terms for using this dependency unclear.
The repository has no security policy. For this small utility the omission is not as serious as it would be for security-sensitive software, but it reduces transparency about vulnerability reporting.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.