Tests, a BSD declaration, and no install-time scripts provide a modest foundation. The single registry maintainer and absent security policy add little reassurance for a project this old.
38%
Total Score
75
100
70
75
The package has only one release, published about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk.
One registry maintainer is listed, which limits visible publishing capacity. The organization-owned repository provides some compensating project backing, so this is not severe on its own.
The repository is not formally archived, but it was last pushed about 10 years ago, which reinforces the lack of recent release activity.
No security policy was found in the linked repository. This is a transparency gap, although it is less significant than the prolonged inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.