The package has a clear README, a declared MIT license, and no install-time scripts. Its tiny footprint and lack of tests or security scanning leave little evidence of ongoing care.
38%
Total Score
50
67
67
This package has made only one release, on December 15, 2016, with no releases in the last 12 months. That is strong evidence of abandonment for a framework integration package.
There have been zero commits and zero active maintainers in the last three months, while the last repository push was in December 2016. This is the strongest evidence that the package is abandoned.
The artifact contains only six files, including its manifest, configuration, middleware, service provider, and README. This is a small, inspectable package, but it also offers little evidence of breadth or test coverage.
There are no open issues or pull requests and no activity in the last month. This is neutral in isolation but provides no evidence of an active maintenance community.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no additional maturity signal.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.