The package includes tests, a license, release notes, and no install-time scripts. Its security documentation and repository activity are limited, so future fixes and support are uncertain.
38%
Total Score
38
100
78
75
The package has had no release in nearly six years: its latest release was August 2020, with none in the last 12 months. This is strong evidence of abandonment risk despite the 11-release history.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating that fixes are unlikely to arrive promptly.
Only one account has registry publish access. With no organization backing shown, this leaves the release dependent on a very thin maintainer base.
The registry namespace and repository owner are the same individual account, with no organization backing indicated. This supports the thin-maintainer concern rather than compensating for it.
There are no open issues or pull requests and no activity in the last month. This is consistent with a dormant project, though it does not show unresolved maintenance work.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.