The package has a clear README, tests, a declared Apache-2.0 license, and a small dependency surface. Its repository matches the package and is not archived, but these strengths provide limited reassurance about long-term support.
38%
Total Score
50
100
71
50
The latest release was on September 30, 2020, with no releases in the last 12 months. This long six-year gap is strong evidence of abandonment risk, despite a previously regular release interval.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates that maintenance has effectively stopped.
The repository has zero stars, one fork, and one watcher. Popularity is only supporting evidence, but these very low adoption signals provide little additional confidence for an inactive package.
The repository is not archived, which is a modest positive, but its last push was also on September 30, 2020 and therefore does not offset the lack of current activity.
The repository has no security policy. This is a transparency and response-process gap, though it is secondary to the much stronger evidence from the release and commit history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.