Its small surface, clear README, and minimal dependency footprint make it easy to assess. The lack of recent project activity means fixes and compatibility updates may not arrive promptly.
58%
Total Score
50
100
88
50
The package declares a post-update-cmd lifecycle script. A registry-side update hook adds some supply-chain and installation complexity, though this signal does not show that the script is harmful.
The latest release was about five years ago, and there were no releases in the last 12 months. This suggests the package may be dormant, although its small scope may reduce the need for frequent releases.
The repository recorded no commits and no active maintainers during the last three months, reinforcing the lack of recent release activity and lowering confidence in ongoing maintenance.
The repository has 3 stars, 0 forks, and 2 watchers. Low adoption is supporting caution rather than a decisive concern, especially for a small utility package.
The repository has no security policy. This is a transparency gap, but it is less significant for a small date/time utility with minimal dependencies.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.