The package includes tests, a matching repository, release notes, and a clear license. Its maintenance has stopped for about two years, while all three workflow actions are unpinned and the repository has no security policy.
58%
Total Score
50
100
78
75
Only one registry account has publish access. That is a limited publishing base, and the repository's inactive commit history provides no evidence of broader active maintenance.
The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the single-maintainer context.
The package has 9 releases, but none in the last 12 months and the latest release was about two years ago, indicating a meaningful maintenance gap despite an initially rapid release burst.
There were no commits and no active maintainers in the last three months, supporting the concern that development has stalled rather than merely slowed.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no visible community cushion for an inactive project.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.