This release is usable, with correct MIT licensing and a small, test-covered codebase. The main concern is maintenance momentum: no releases in the last 12 months and no recent commits/issues activity. Automation/security checks weren’t auditable here.
58%
Total Score
50
83
Only 1 maintainer is listed, so the bus factor is effectively low and changes or fixes may depend on a single person’s availability.
The project’s latest release is v2.3.3 from about 3 years ago, and there have been 0 releases in the last 12 months, suggesting stalled upkeep for this dependency.
There are 0 commits and 0 active maintainers in the last 3 months, which aligns with the lack of recent release activity and raises abandonment/lag risk.
No GitHub workflows were analyzed (workflows_total=0), so CI/release automation safety can’t be verified from this audit output.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.