The MIT license, clear README, exact repository match, and absence of install scripts make the package transparent and straightforward to integrate. Its single runtime dependency keeps the surface small, but future compatibility may require maintaining it yourself.
55%
Total Score
50
100
86
75
Only two releases were published, both on December 1, 2017, with no releases in the following years. That is a meaningful maintenance concern for a dependency, though the package is small and stable.
There were no commits and no active maintainers in the last three months. Combined with the old release history, this indicates a largely dormant project and raises compatibility risk.
There are no new or closed issues in the last month and one open pull request, showing little recent project activity but not an overwhelming backlog.
The linked repository is not archived, although its last push was in March 2021, so it remains available but is not evidence of current maintenance.
The repository has no security policy. For this small data-generation provider this is a transparency gap, but it is less severe than for software handling credentials or sensitive data.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
fzaninotto/faker Version ^1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.