The project has solid documentation, tests, a changelog, a small dependency footprint, and active repository tooling. Its registry release history and recent commit activity are quiet, so future maintenance is less certain.
68%
Total Score
50
100
94
83
The repository is owned by an individual rather than an organization, so the single registry maintainer reflects a genuinely narrow visible ownership base. This increases continuity risk when combined with quiet recent activity.
The package has 19 releases since July 2016, but none in the last 12 months and its latest registry release was in March 2024. This indicates a meaningful maintenance slowdown.
The repository recorded zero commits and zero active maintainers in the last three months. This is a direct sign that ongoing maintenance may have paused.
There are three open issues and four open pull requests, but no new or closed issues or merged pull requests in the last month. This suggests limited current project activity.
No security policy is present. That is a transparency gap for reporting vulnerabilities, though it is less severe for a small library with a limited runtime dependency footprint.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.