The package is small, has a clear README, MIT licensing, and no install-time scripts. Its lone maintainer and absent security policy provide limited evidence of ongoing support.
42%
Total Score
50
100
78
75
One registry maintainer is listed, which is a thin publishing base for a user-owned project and increases continuity risk if that person becomes inactive.
The source repository is owned by a user account matching the package's publishing namespace, with no organization backing shown. This is consistent ownership but offers limited institutional continuity.
Only two releases were published, from June to July 2022, with no releases in the following four years. This is a substantial abandonment concern despite the stable version.
There were zero commits and zero active maintainers in the last three months, consistent with the repository having gone quiet for about four years. This materially raises abandonment risk.
The repository has one star and no forks, providing little evidence of broad community review or shared maintenance. Popularity is supporting evidence only, so this is a modest concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.