This is a usable, established package with a release history since 2018, a stable v2.0.0 release, a non-deprecated and non-archived repository, explicit GPL-3.0-or-later licensing, and source-repository tests that compensate for the absence of packaged tests. The main concerns are very low recent activity (one commit in the last three months, from one contributor), minimal repository popularity, a very short README, no security policy or security-scanning tooling, and a relatively concentrated maintainer base. Organization backing, a recent repository push, and a correctly matching repository reduce abandonment and provenance concerns, but the package warrants monitoring before becoming a critical dependency.
72%
Total Score
80
50
83
90
The package declares nine runtime dependencies and no development dependencies. The dependency set is substantial and increases transitive dependency surface, but the provided signal does not show that it is unreasonable for this package.
The artifact has a README but it is only 8 characters long and lacks packaged tests and a changelog. Repository tests and GitHub Releases compensate for the missing packaged tests and changelog, but the minimal README remains a transparency gap.
All recent commits came from one contributor, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, so this is a caution rather than a severe risk.
Only one commit was recorded in the last three months, with one active maintainer. Recent maintenance exists, but the pace is thin and creates some risk that fixes may be slow.
The repository has only 3 stars, 0 forks, and 2 watchers. Low popularity is supporting evidence rather than a verdict, but it indicates limited external adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
n2n/n2n Version ^7.5 | — | — |
n2n/rocket Version ^2 | — | — |
n2n/n2n-l10n Version ^7.5 | — | — |
n2n/n2n-cache Version ^7.5 | — | — |
n2n/n2n-persistence Version ^7.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.