The MIT license, release notes, and readme make the project easy to inspect. Its small dependency set and read-only workflow permissions help, but maintenance appears to have stopped after August 2023 and the repository has no security scanning.
43%
Total Score
63
100
67
63
The package has had no releases in the last 12 months, and its latest release was about three years ago. Only six releases exist overall, which is consistent with an abandoned or inactive project.
The repository recorded zero commits and zero active maintainers in the last three months, matching the long gap since the last release and indicating stopped development.
An install-time post-root-package-install script runs during installation. The signal does not show that it is unsafe, but install hooks add execution and maintenance surface.
There are no open issues or pull requests, and no issue or pull-request activity in the last month. With no other recent activity, this gives little evidence of ongoing maintenance.
The repository has zero stars and forks and only one watcher. Popularity is not decisive by itself, but these counts provide little supporting evidence of adoption or community resilience.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pyxol/magnetar Version <1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.