The package is clearly licensed, matches its source repository, and has a small dependency surface. Its minimal documentation and absent security policy provide little evidence of current project support.
38%
Total Score
50
100
64
50
The latest release was published in November 2013, with no releases in the last 12 months. This long period without updates is strong evidence of abandonment risk.
The repository is not archived, but its last push was in November 2013, matching the stale release history and providing no evidence of recent maintenance.
There have been no new or closed issues or pull requests in the last month. With the repository already inactive for years, this reinforces the lack of current project activity.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counts provide no supporting evidence of an active user or contributor community.
The repository has no security policy. This is a transparency gap for a package that processes external feed data, although it does not by itself establish a security defect.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.