The package has a brief README, no license, and no security policy, which limit transparency and adoption confidence. Its dependency surface is small, and the repository matches the package and has no install-time scripts.
32%
Total Score
25
100
56
75
The latest release was about 12 years ago, with no releases in the last 12 months. This strongly indicates abandonment risk despite a history of nine releases.
There were no commits and no active maintainers in the last three months. Combined with the repository's last push about 12 years ago, this is strong evidence of abandoned maintenance.
No license is declared, detected, or included in the package or repository. That creates a material legal and transparency gap for prospective users.
A README is present, which gives consumers a basic quickstart, but it is only 184 characters and there are no tests or changelog. The missing tests and changelog are normal packaging practice, while the brief documentation limits confidence.
The repository is owned by a user account rather than an organization, so there is no demonstrated organizational backing to compensate for the thin maintenance evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.