The repository has no tests, changelog, or security policy, and its name does not match the package. Its simple 13-file layout and stable 1.0.0 release reduce complexity, but do not offset the long silence.
38%
Total Score
61
88
This package has had only one release, on September 21, 2021, with no releases in roughly five years. That is strong evidence of abandonment for a library dependency.
No license declaration or license file was found in the package or repository, leaving consumers without clear permission to use or redistribute it.
The package has no README, while tests and a changelog are normally repository concerns and their absence is not itself a packaging defect. Missing consumer documentation still reduces transparency for this library.
The repository name does not match the package name, and no README mention was available. This weakens confidence that the linked repository clearly documents and owns this package.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these figures provide little external evidence of maturity or ongoing use.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.