Tests, a clear license, release notes, and no install scripts provide useful safeguards. The repository has had no commits for more than three years and lacks security scanning and a security policy, so maintenance confidence is limited.
62%
Total Score
50
100
83
83
The repository is owned by an individual rather than an organization, so the single registry maintainer reflects a genuinely thin ownership base.
The package has had no release in more than three years, despite a prior median release interval of about 115 days; this is a meaningful abandonment concern.
There were no commits and no active maintainers in the last three months, consistent with the long release gap and indicating limited current maintenance capacity.
There are two open issues and no recent issue or pull-request activity, adding modest evidence that maintenance is inactive.
The repository has only 3 stars and 1 fork, which provides little supporting evidence of broad community scrutiny, though popularity is not decisive for a small library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.