38%
Total Score
unhealthy
Risky: no release since 2018 and the linked repository does not identify this package.
This package has only one release, published in May 2018, with no releases in the last eight years. That is strong evidence of abandonment risk.
The repository has had no commits or active maintainers in the last three months, consistent with the last push occurring in May 2018 and indicating no current maintenance capacity.
The manifest declares GPL-3.0-or-later, but the artifact license file is detected as GPL-2.0. A license is present, but the mismatch requires legal clarification before adoption.
A README is present but only 110 characters and still lists documentation as a TODO. Missing tests and changelog files are normal for a published artifact and are not counted against it.
The repository name does not match the package name and its README does not mention the package, so the source-package relationship is not clearly established.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.