The package is clearly identified, documented, licensed, and has a small dependency surface. Its source repository is quiet and has no security policy, so future fixes are uncertain.
52%
Total Score
33
100
72
75
Only three releases were published, all during September 2020, with no releases in the last six years. This is a meaningful maintenance concern for a package that may need compatibility updates.
There were zero commits and zero active maintainers in the last three months, consistent with the repository having been quiet for years. This materially increases the risk that compatibility or defects will not be addressed.
The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it also indicates limited visible project backing.
There is one open issue and no issue or pull-request activity in the last month. This is weak evidence of current maintenance, though the small project size limits what can be inferred.
The repository has five stars and five forks, indicating limited adoption and a small external support signal. Low popularity alone is not disqualifying, but it provides little evidence of broad ongoing use.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.