It is a minimal five-file package with a clear README, MIT licensing, and a single runtime dependency. A one-person project with no security policy or scanning offers limited evidence for ongoing stewardship.
40%
Total Score
33
100
78
75
The latest release was published in January 2019, and there have been no releases in over seven years. Four releases show an established history, but the long publication gap is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release inactivity and leaving no evidence of current maintenance.
One registry account has publish access. Because the linked repository is user-owned, this is consistent with the project structure, but it leaves a thin apparent maintainer base.
The artifact and repository contain the same small five-file tree, which is transparent and easy to inspect, though it also indicates a very limited project surface.
The registry namespace and repository are owned by the same individual account, giving the package clear ownership but no organizational backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jaeger/querylist Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.