The MIT license and one runtime dependency keep adoption straightforward. The tiny, unfinished documentation and lack of tests leave little evidence that future changes will be maintained safely.
38%
Total Score
0
100
70
75
The latest release was about nine years ago, with only two releases ever and none in the last 12 months. This is strong evidence of abandonment risk.
The repository had no commits and no active maintainers in the last three months, consistent with the long release gap and lack of ongoing maintenance.
The package includes a README, but it is only 66 characters and still contains TODOs; it has no tests or changelog. Missing tests are not inherently unusual in an artifact, but the unfinished README reduces transparency for consumers.
The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a secondary concern because the package is small and otherwise has no indicated security tooling.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.