The package is tiny and clearly matches its repository, with a simple dependency profile and no install scripts. Its single-maintainer publishing model and absent security policy add little reassurance.
44%
Total Score
50
100
50
75
The latest release was published on September 30, 2020, and there have been no releases in the last six years. Although the package had five releases early in its history, this long silence materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing that development stopped years ago.
Only one registry account has publishing access. The project is organization-backed, which makes a short registry maintainer list normal publishing hygiene, but no activity signal shows an active maintainer today.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy small package, but these figures provide no additional evidence of an active user or contributor community.
The repository is not archived, which avoids an explicit abandonment marker, but its last push was on September 30, 2020 and does not offset the lack of recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mix/http-server Version ~2.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.