The package has a clear MIT license and a small dependency surface. Its source repository matches the package and remains unarchived, but maintenance activity has stopped and no security policy is visible.
58%
Total Score
50
80
75
The artifact includes a README entry and this release has a GitHub release, but the README is empty and the repository has neither tests nor a changelog. Missing repository tests and changelog are normal, while the empty consumer documentation is a minor concern.
This is the only release, published about 14 months ago, with no releases in the last 12 months. That leaves limited evidence of ongoing maintenance.
The repository had zero commits and zero active maintainers in the last three months, consistent with activity stopping around 14 months ago. This is meaningful abandonment risk for a library dependency.
The repository has no security policy. This weakens vulnerability-reporting transparency, though it is a moderate hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^3.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.