Risky to adopt: the package has had no release or commit activity since April 2019, leaving it effectively unmaintained. Its tiny artifact and repository that does not clearly reference the package add transparency concerns, despite having a declared license and no install-time scripts.
42%
Total Score
25
61
80
The latest release was about 7 years ago, with no releases in the last 12 months and only three releases overall. That strongly suggests the package is no longer actively maintained, although the stable 1.0.3 version may be acceptable for a frozen integration.
There were zero commits and zero active maintainers in the last 3 months, consistent with the last push being about 7 years ago. This is the clearest evidence that maintenance capacity has collapsed.
The artifact and repository each contain only four files, including a template and block metadata. That may fit a small block package, but it provides little visible project surface for assessing maintenance or documenting use.
A README is present, but it contains only 29 characters and there are no tests or changelog. Missing tests and changelog are normal for published artifacts, while the nearly empty README leaves consumers with little integration guidance for this block.
The repository is owned by an organization, which provides some project backing and makes a short registry maintainer list unsurprising. However, the backing has not translated into recent release or commit activity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.