The stable version and minimal dependency set keep integration straightforward. However, the last release and repository activity date to April 2016, while the repository does not identify this package in its README; future fixes are unlikely.
35%
Total Score
50
100
67
50
The package has had no releases in more than 10 years, despite having 10 historical releases. That long period without updates is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
The linked repository neither matches the package name nor mentions the package in its README. That makes package ownership and source alignment less transparent.
The repository is not archived, but its last push was in April 2016, so the unarchived status does not compensate for its inactivity.
The repository has no security policy. This is a transparency gap, though it is secondary to the much stronger abandonment concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.