Only one registry maintainer is listed, and the package has a small runtime dependency set without repository evidence to verify ongoing work. It is not deprecated, but its narrow maintenance base leaves adoption exposed to abandonment.
42%
Total Score
50
100
50
The latest release was on November 30, 2021, nearly five years before collection, with no releases in the last 12 months. Despite 17 releases and a historically rapid median interval, the current inactivity is a substantial abandonment concern.
Only one registry account has publish access. That narrow maintenance base increases continuity risk, especially alongside the long gap since the last release.
Version 0.8.9 is not a prerelease, so it does not carry prerelease instability. However, it remains below 1.0, which provides less compatibility confidence for a dependency that has also seen no recent releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
getpop/access-control Version ^0.8.9 | — | — |
pop-schema/user-state Version ^0.8.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.