A single contributor made one recent commit, but the project has little visible community activity. The MIT license, README, release notes, and non-deprecated status help; no security policy or scanning leaves a transparency gap.
58%
Total Score
50
90
50
The package has had no releases in the last 12 months, and its latest registry release was on September 28, 2024, indicating a long release gap. Its 14 releases over roughly eight years show some prior history but do not offset the current slowdown.
All recent repository activity comes from one contributor, leaving maintenance dependent on a single person. The linked repository is user-owned, so there is no organization backing shown to compensate for that concentration.
The repository recorded one commit in the last three months, showing some recent maintenance despite the absent registry releases. One commit is limited evidence of an active release process.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a maintenance and disclosure gap, not evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.