The package includes a usable README, tests, matching MIT licensing, and a correctly identified source repository. Its single-maintainer project has had no commits for over four years, with no releases since November 2020 and several unresolved pull requests.
58%
Total Score
50
88
The registry lists one maintainer, which creates a thin support base. The matching personal repository provides some ownership clarity, but no broader maintainer capacity is shown.
The package has only three releases and none in nearly six years; the latest release was published in November 2020. This is strong evidence of stagnation, although the repository is not archived.
The repository recorded zero commits and zero active maintainers in the last three months, and its last push was over four years ago. That leaves little evidence of ongoing maintenance.
There has been no issue or pull-request activity in the last month, while one issue and three pull requests remain open. This reinforces the maintenance concern but does not by itself make the package unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fzaninotto/faker Version ^1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.