The package is well documented, tested, licensed, and backed by an organization-owned repository. Its release and commit activity stopped in October 2023, while all seven workflow actions are unpinned and no security policy is present.
58%
Total Score
50
71
75
Only two releases exist, with none in the last 12 months; the latest release was over two years ago. This indicates substantial abandonment risk despite the package remaining undeclared as deprecated.
There were no commits and no active maintainers in the last three months, consistent with the last push being in October 2023. This materially raises the risk that defects or platform changes will go unaddressed.
The repository name does not match the package name and its README does not mention the package, so the package-to-repository relationship is less transparent. The organization backing helps, but does not fully remove this concern.
The repository has no security policy. That weakens vulnerability-reporting transparency, although it is less significant than the package's prolonged inactivity.
Version v0.2.0 is not a stable-major release, which leaves more room for compatibility changes. It is not marked as a prerelease, so this is a modest maturity concern rather than a severe release warning.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.