It includes tests, a README, an MIT license, and no install-time scripts. Pinning this exact version is prudent because compatibility fixes and timely support are unlikely.
43%
Total Score
50
71
75
The package has had no release in more than seven years; all five releases appeared within a very short initial period, with none in the last 12 months. This strongly suggests abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
The repository has one star and no forks, offering little community evidence or external maintenance support. Popularity is only supporting evidence, but it reinforces the abandonment concern.
The repository has no security policy or security-scanning tooling, leaving vulnerability reporting and detection practices undocumented. This is a hygiene concern rather than evidence that the release is unsafe.
Version 0.0.5 is not a stable major release, so compatibility expectations are limited. The absence of recent prereleases does not offset the broader lack of maintenance evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.