The MIT license, small dependency surface, and release notes help transparency. There is no security policy, and the repository has only two stars, leaving little evidence of ongoing support.
38%
Total Score
33
50
The package has only two releases, both in February 2019, with no releases in roughly seven years. This is strong evidence of abandonment for a library dependency.
The repository has two stars, no forks, and two watchers. Popularity is not decisive, but these numbers provide little supporting evidence of an active user or contributor base.
The repository is not archived, but it was last pushed in March 2019, nearly seven years ago. The non-archived status does not offset the prolonged lack of activity.
The repository has no security policy. For an ORM that handles database access, this leaves security reporting and maintenance expectations less transparent.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.