The artifact is compact, documented, and matches its source repository, with no install scripts or archive flag. Pin this version and verify future changes because the license mismatch and long inactivity reduce confidence.
55%
Total Score
50
86
100
The manifest declares GPL-2.0-or-later while the artifact license file is detected as GPL-3.0. A license is present, but the mismatch creates legal ambiguity for adopters.
Only one registry maintainer is listed. This is a thin publishing base, although the matching source repository shows the package is tied to the same individual.
The package has 26 releases, but none in the last two and a half years; this indicates a substantial maintenance slowdown despite a previously regular release cadence.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long gap since the latest release and increasing abandonment risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.