It includes tests, release notes, a README, and no runtime dependencies. The workflow is complete but uses two unpinned actions, and no security policy is provided. Pin this exact version only when its limited maintenance is acceptable.
40%
Total Score
0
100
71
67
The package has had only one release, published over five years ago, with no releases in the last 12 months. This is strong evidence of an unfinished or abandoned project.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its last push in July 2021.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than decisive, but it provides no compensating adoption signal for the stalled maintenance.
The repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities. This is a transparency and maintenance gap, though not severe on its own.
The only release is v0.0.1, an early pre-1.0 version. This leaves API stability and project maturity less established, although it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.