This release is usable but carries meaningful maintenance and transparency concerns. It is not deprecated or archived, has a stable version, a recent registry release, a linked repository that references the package, and no install-time lifecycle scripts. However, the project has only four releases over roughly 678 days, just one release in the last 12 months, no commits or active maintainers in the last three months, no tests or changelog, no security policy, and very limited repository adoption. The package is therefore not clearly unfit to depend on, but developers should review its code and have a contingency plan for maintenance issues.
58%
Total Score
50
100
78
88
A README and GitHub Releases are present, but neither the artifact nor repository contains tests or a changelog. For an integration extension, the missing tests and change documentation reduce maintainability and release transparency.
The repository is owned by a personal user account rather than an organization. This does not establish abandonment, but it provides less visible institutional backing for long-term maintenance.
The package is about 678 days old with four releases, only one release in the last 12 months, and a median release interval of about 191 days. This indicates a slow release cadence and limited evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. This is the strongest maintenance concern in the available evidence, despite the recent repository push and latest registry release.
There are no open issues or pull requests and no issue or pull-request activity in the last month. While this avoids an unresolved backlog, it also provides no evidence of an active user or maintainer feedback loop.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.