Documentation and tests reduce adoption friction, while the narrow dependency declaration leaves compatibility unclear. Pinning this release would leave you responsible for long-term framework and API compatibility.
42%
Total Score
0
79
50
The latest release was published in April 2016, with no releases in the last 12 months despite the package being about 10 years old. This is strong evidence of abandonment risk for a framework integration.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap rather than showing compensating maintenance.
The repository has only 1 star and 1 fork, with 2 watchers. Popularity is not decisive, but this provides little evidence of a broad user or contributor base to offset the inactivity.
The repository has no security policy or documented reporting process. This is a transparency and maintenance gap, though it is less severe than the lack of current releases and commits.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.