Its single runtime dependency and stable version reduce integration friction. However, the source has had no commits since March 2016, and the release has no declared or detected license, leaving long-term maintenance and legal clarity weak.
38%
Total Score
0
100
56
75
No declared license, license file, or detected repository license was found, so the release has no clear permission for downstream use.
This package has only one release, published about 10 years ago, with no releases in the last 12 months; that is strong evidence of abandonment risk.
There were zero commits and zero active maintainers in the last 3 months, consistent with the decade-long release gap and materially increasing abandonment risk.
The artifact includes a README and the exact version has a GitHub release, but the README is only 8 characters and there are no tests or changelog; the release record partly compensates for the missing changelog.
The repository has zero stars and forks and one watcher, providing no meaningful community evidence to compensate for its inactivity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.