A missing security policy and install-time scripts add modest maintenance and review concerns. The MIT license, focused dependency set, release notes, and organization-backed repository provide useful transparency.
45%
Total Score
50
100
72
67
Although the package has 14 releases over more than 10 years, it has had no release in the last 12 months and its latest release was in December 2021, indicating prolonged inactivity.
There were zero commits and zero active maintainers in the last three months, corroborating the release-history evidence of a project that has stopped receiving maintenance.
post-install-cmd and post-update-cmd scripts add install-time behavior that consumers should review, creating a modest supply-chain and maintenance concern.
There are no open issues or pull requests and no recent issue or pull-request activity, which is consistent with a dormant project but does not alone prove abandonment.
The repository has no stars or forks and only 15 watchers, offering little supporting evidence of broad community adoption; popularity is secondary to maintenance evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.