There is no security policy, and the linked repository does not name the package in its README, weakening transparency. The artifact has tests, documentation, and release notes, but those positives do not offset the long inactivity.
42%
Total Score
0
70
50
The latest release was over 11 years ago, with no releases in the last 12 months. That strongly raises abandonment risk despite a history of 14 releases.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap and indicating no current maintenance.
The linked repository name does not match the package and its README does not mention the package. This weakens confidence that the repository clearly documents and owns this package.
No security policy was found in the linked repository, leaving vulnerability reporting and response expectations unclear for a package with no recent maintenance evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.