The README, tests, matching MIT license, and organization-backed repository provide useful transparency. Maintenance has stopped for about four years, with no releases or commits in the last year and no security policy, so future fixes are uncertain.
58%
Total Score
75
92
75
The package has 88 releases since September 2017, but none in the last 12 months and the latest release was in August 2022. The long release history shows prior maturity, while the prolonged release gap raises abandonment concern.
The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the latest push being about four years ago. No provided activity signal compensates for this maintenance gap.
The linked repository has no security policy. This weakens disclosure transparency for a package that handles remote calls and signed or encrypted requests, though it is not evidence of a security defect by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
opis/closure Version ^3.0.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.