The package is small, has no runtime dependencies, and includes a usable README plus repository tests. Its single release was published over eight years ago and the repository has had no commits for over six years, so future fixes and compatibility work are uncertain.
54%
Total Score
50
100
92
This package has only one release, published over eight years ago, with no releases in the last 12 months. That indicates a dormant release process, although a small stable library may not need frequent releases.
There were no commits and no active maintainers in the last three months, following a last repository push over six years ago. This is the clearest evidence that fixes and updates may not arrive promptly.
The only workflow was fully analyzed with no reported audit findings or untrusted-trigger sinks, but its sole action reference is unpinned. That is a limited reproducibility and supply-chain hygiene gap, not a severe risk by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.