The package has clear documentation, tests, a changelog, a license, and no install-time scripts. Maintenance has largely stopped, with no releases in over 11 years and no commits in the last 3 months; the repository also lacks a security policy.
62%
Total Score
67
81
83
The package has 21 releases, but its latest release was over 11 years ago and there were no releases in the last 12 months. This is a meaningful maintenance concern for a dependency, although the long history suggests the release is mature rather than experimental.
There were zero commits and zero active maintainers in the last 3 months. The repository was pushed in 2024, but the lack of current development lowers confidence in ongoing maintenance.
There were no new or closed issues or pull requests in the last month, while 19 issues and 11 pull requests remain open. This suggests limited current project responsiveness.
The repository uses Make for build tasks, but no security scanning tools were detected. For a small utility this is a hygiene gap, not evidence of abandonment by itself.
No security policy was found in the repository. This weakens vulnerability-reporting transparency, though it is less serious for a small dependency with no install-time scripts.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.