It has a clear BSD-3-Clause license, a matching repository, and no install-time scripts. The missing security policy leaves little documented support for an old dependency.
35%
Total Score
0
67
75
This is the package's only release, published in November 2014, with no releases in the subsequent 11 years. That strongly indicates abandonment risk despite the stable version label.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with no observed development since November 2014. There is no recent activity to offset the stale release history.
The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a meaningful transparency gap for a dependency that has seen no recent maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.