The package is small and easy to inspect, with a clear README, repository tests, a license, and only one runtime dependency. It is not deprecated or archived, which limits the risk.
42%
Total Score
25
100
80
50
The registry shows only one release, published over 11 years ago, with no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.
The repository had zero commits and zero active maintainers in the last three months. The repository's last push was in July 2020, reinforcing the abandonment concern.
There were no new or closed issues and no pull requests in the last month, with two issues remaining open. This supports the picture of an inactive project, though the small issue backlog limits the severity.
The repository has no security policy. For a small, inactive template engine this reduces transparency and gives maintainers no documented vulnerability-reporting path.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.