The package has a clear 16-file structure, a README, an MIT declaration, and no install-time scripts. Its narrow scope limits the impact of the missing tests and security policy, but the maintenance evidence remains weak.
43%
Total Score
0
60
75
Only two releases exist, with none in the last 12 months; the latest release was over five years ago. This is strong evidence of abandonment risk for a dependency whose future maintenance may matter.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and weakening confidence in ongoing maintenance.
The repository name matches the package, but its README does not mention the package. The name match is reassuring, while the missing README reference leaves a minor ownership and packaging-transparency concern.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is supporting evidence rather than a verdict, but these values provide no external indication of active adoption or review.
The repository has no security policy. This is a transparency gap, though the package's small apparent scope makes it less consequential than the prolonged inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.