The package has a clear README, MIT licensing, and only one runtime dependency. The repository could not be found, so maintenance and provenance cannot be verified; install and update hooks add operational risk.
18%
Total Score
100
70
50
The last release was in July 2016, with no releases in the past 12 months despite the package being over 10 years old. This is strong evidence of abandonment.
The package runs post-install and post-update scripts, adding operational complexity and risk to an already unmaintained dependency.
Version 0.1.5 is not a stable major release, and the package has had no recent releases to demonstrate continued support or maturity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.