The repository is not archived and has tests, matching source, MIT licensing, and lightweight dependencies. Registry releases stopped about 4 years and 9 months ago, while recent commit activity is absent and no security policy is published; verify compatibility before pinning it.
61%
Total Score
75
100
92
50
The package has 13 releases since 2012, but none in the last 12 months and the latest release is about 4 years and 9 months old. This is a meaningful maintenance concern despite the long project history.
The repository recorded zero commits and zero active maintainers in the last 3 months. This weakens evidence of ongoing development, although the later push date shows the repository has not been abandoned outright.
No security policy is present in the linked repository. This is a transparency and reporting gap, but it is not severe enough to outweigh the matching source, tests, and established project structure.
The single workflow has no dangerous triggers, unpinned actions, or audit findings, but one file failed analysis, so the result is incomplete rather than a complete clean bill of health.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.