The artifact is clearly licensed and avoids install-time scripts. Its small project has little visible adoption, no security policy, and no recent maintenance.
32%
Total Score
25
72
75
The package has had only 3 releases, all clustered in November 2021, with no release in nearly 5 years. This is strong evidence of abandonment for a framework dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with its last push in November 2021. This materially lowers confidence in ongoing maintenance.
Only one registry account has publish access, and the project is backed by an individual rather than an organization. This leaves a thin maintenance and publishing base.
The repository name does not match the package name, and no README package mention was found. That creates caution about whether the linked repository is the package's authoritative project.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive, but these counters provide no supporting evidence of active community use.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.