The package is clearly licensed and the source includes tests and a changelog. Its low repository activity, absent security tooling, and lone registry maintainer provide little ongoing assurance.
30%
Total Score
25
100
67
75
The latest release was published over 11 years ago, and there have been no releases in the last 12 months. The historical 72-release cadence shows past activity but does not offset the prolonged stoppage.
There were no commits and no active maintainers in the last three months, consistent with the repository having been inactive since February 2015.
The package and repository are owned by the same individual account, confirming a direct source relationship but offering no organizational backing to offset the inactive project.
The repository name does not match this package and its README does not mention the package, so the linkage is not clearly demonstrated and may reflect a repository mismatch.
The repository has only 2 stars and 1 fork, offering little supporting evidence of broad community review or adoption. Popularity is supporting evidence, so this is secondary to the maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.