The MIT license and absence of install-time scripts make the artifact straightforward to evaluate and install. The repository could not be found, while the last release was over three years ago and one maintainer leaves little evidence of ongoing support.
40%
Total Score
50
60
100
The package has had no releases in the last 12 months, and its latest release was over three years ago. This materially increases abandonment risk despite a multi-year release history.
Only one registry maintainer is listed, leaving limited demonstrated capacity for continuity or review when maintenance is needed.
The artifact includes a README file, but it is empty, which weakens consumer documentation for a library. The absence of tests and a changelog is not concerning because those normally belong in the source repository.
The release remains on the 0.x line, which indicates a less mature compatibility commitment than a stable major release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.