The license is clear and installation has no lifecycle scripts. The single 2018 release, one maintainer, and missing README point to limited maintenance capacity; the repository could not be found, so provenance remains unverified.
35%
Total Score
50
50
100
This package has only one release, published about 7 years and 9 months ago, with no releases in the last 12 months; that strongly suggests abandonment risk.
Only one registry maintainer is listed, providing little redundancy; the old single-release history reinforces the concern about ongoing maintenance capacity.
The package has no README, which makes integration harder for a plugin package; absent tests and a changelog are not concerns because those normally belong in the source repository rather than the published artifact.
The latest version is v0.1 rather than a stable major release, which adds maturity risk, although it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.