No license is declared or included, and the repository has only one star and one fork. The package artifact also lacks a README, making integration and support expectations harder to establish.
38%
Total Score
50
40
50
This package has only one release, published about 10 years ago, with no releases in the last 12 months. That strongly suggests abandonment, although the registry does not mark it deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being about 10 years ago. The organization backing provides some ownership context but does not offset the lack of observed maintenance.
Neither a license declaration nor a license file was found. This creates a material legal and adoption risk for a dependency.
The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README makes this small library harder for consumers to understand and integrate.
The repository has only 1 star, 1 fork, and 2 watchers. Popularity is supporting evidence rather than a verdict, but these very low levels provide little evidence of active community support.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
samsonos/js_core Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.