The stable version and small dependency footprint are positives, but only one publisher account is recorded. The package repository could not be found, so maintenance and provenance cannot be verified.
40%
Total Score
50
100
67
The package has had no release in nearly 11 years, despite 12 releases overall, which is strong evidence of abandonment risk. Its earlier rapid release cadence does not compensate for the long period without a release.
Only one registry account has publish access, leaving little visible publishing redundancy. This is administrative evidence rather than proof of current activity, but it adds to the maintenance risk when release activity is already absent.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.