The package is small and clearly structured, with an MIT declaration, README, and no install-time scripts. One maintainer and no security policy leave limited oversight for future changes.
58%
Total Score
50
83
88
The repository had zero commits and zero active maintainers in the last 3 months. Combined with the old latest release, this is strong evidence of inactive maintenance.
Only one registry maintainer is listed. That may be sufficient for a small package, but it leaves limited visible publishing redundancy if the maintainer becomes unavailable.
The package has 4 releases since January 2020, but none in the last 12 months and the latest release was in August 2022. This indicates a meaningful maintenance concern for a dependency.
There were no new or merged issues or pull requests in the last month. This supports the inactivity concern, although a small configuration project may naturally receive little issue traffic.
The repository has no stars or forks and only 2 watchers. Popularity is not decisive for a small package, but it provides little supporting evidence of broad review or adoption.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.