Its dependency footprint is small, installation runs no lifecycle scripts, and the source is not archived. However, the only release is from 2018, recent commit activity is absent, and the manifest's proprietary license conflicts with the BSD-3-Clause file.
55%
Total Score
50
100
80
100
The artifact contains a BSD-3-Clause license file, so the release is licensed, but the manifest declares it as proprietary. This mismatch creates avoidable legal uncertainty.
This is the package's only release, published in November 2018, with no releases in the last 12 months. That long release gap raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed in July 2024, current development activity is not evident.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.