The organization-owned repository matches the package, has release notes, and adds no runtime dependencies. The declared GPL-2.0-or-later license conflicts with the detected LGPL-2.1 file, so licensing should be clarified.
62%
Total Score
75
100
75
The package declares GPL-2.0-or-later and includes a license file, but that file was detected as LGPL-2.1. The mismatch needs clarification before adoption.
This is the package's first release, published today, so there is no release track record to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers during the last three months. The package is newly released, which limits how strongly this indicates abandonment, but maintenance is not yet demonstrated.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.