39%
Total Score
unhealthy
Risky: no release or commit activity for over 11 years, and the only version is v0.0.1.
The package has had only two releases, both on 10 January 2015, with no releases in the last 12 months. More than 11 years without a release is strong evidence of abandonment risk.
The repository has recorded no commits and no active maintainers in the last three months, while its last push was in January 2015. This provides little evidence that defects or compatibility issues will be addressed.
No declared license, license file, or repository license file was detected. That creates a real legal and adoption concern for downstream projects.
The repository is owned by an individual user rather than an organization, so there is no organizational backing signal to offset the thin maintenance history.
The repository has no security policy. For a small, inactive workshop package this is secondary to the maintenance concerns, but it reduces transparency for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
beberlei/assert Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.