Usable with caveats: the release is licensed, tested, recently published, and not deprecated, but the project has a very small history and no recent repository activity. The linked repository also does not clearly identify this package, which reduces transparency.
62%
Total Score
50
50
72
90
The package has two runtime dependencies, including another package from the same publisher; this is a modest dependency surface but creates some additional maintenance coupling.
One registry account publishes the package. That is consistent with an individually owned project, but it leaves limited publishing redundancy.
The registry namespace and repository owner match an individual account, providing direct ownership alignment but no organizational backing or redundancy.
Only four releases have been published across roughly five years and eight months, with one release in the last 12 months. The recent release shows some activity, but the overall cadence is sparse.
There were zero commits and zero active maintainers in the last three months. Although a release was published recently, the lack of observed development activity raises maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.0|^3.0 | — | — |
michaeldrennen/calendar Version ^0.0|^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.