The code is small, licensed, tested, and has no install-time scripts. Maintenance evidence is effectively frozen, and the linked repository does not clearly identify this package; adopting this old release leaves little support.
35%
Total Score
100
58
83
The package has only two releases, both in February 2013, and none in roughly 13 years. That strongly indicates abandonment risk despite the short initial release interval.
The linked repository name does not match the package name and its README does not mention the package. That weakens confidence that the repository is the authoritative source for this release.
The repository has zero stars, one fork, and one watcher. Popularity is only supporting evidence, but these numbers provide no meaningful evidence of an active user or maintainer community.
The repository is not archived, which preserves a path for maintenance, but its last push was about 13 years ago. The stale repository does not offset the lack of recent releases.
No security policy is present in the repository. This is a transparency and vulnerability-reporting gap, although it is secondary to the much older maintenance evidence.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
jyggen/curl Version 1.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.