Tests are included, dependencies are minimal, and installation runs no lifecycle scripts. The missing license file and security policy reduce transparency for long-term adoption.
42%
Total Score
0
100
60
75
The package has had no releases in more than 8 years: all four releases arrived within about 25 minutes in December 2017, with none in the last 12 months. This strongly suggests abandonment despite the stable 1.0.3 version.
There were zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating no current maintenance capacity.
The repository has zero stars and forks and one watcher, offering little supporting evidence of active community use. Popularity is supporting evidence only, so this reinforces rather than determines the maintenance concern.
The repository is not marked archived, but its last push was in December 2017, so the unarchived status does not compensate for the prolonged lack of activity.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is less severe than the package's maintenance inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.