The codebase is small, clearly identified, and has a matching README with explicit Apache-2.0 licensing. Maintenance and security evidence are dated, with no releases or commits in nearly seven years and no security scanning or policy.
42%
Total Score
38
100
78
75
The latest release was published in October 2019, with zero releases in the last 12 months; this long release gap is a substantial abandonment concern.
There were zero commits and zero active maintainers in the last three months, consistent with the release history showing maintenance stopped nearly seven years ago.
One registry maintainer is listed. This is a limited publishing base, but the linked repository identifies the same project and no administrative access list is being treated as maintenance evidence.
The repository is owned by a user account rather than an organization, so there is no provided evidence of broader organizational backing to compensate for the single maintainer and inactivity.
There are no open issues or pull requests and no recent issue or pull-request activity. The clean tracker is not evidence of active maintenance given the absence of recent commits.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.