Its single runtime dependency keeps the package small, and it is not deprecated or archived. The missing license and repository/package name mismatch reduce transparency for adopters.
35%
Total Score
40
75
The package has had only 3 releases, with none in the last 12 months; its latest release was over 6 years ago. This strongly suggests the package is no longer actively maintained.
No declared license, license file, or repository license file was detected. That leaves legal reuse and redistribution terms unclear.
The repository name does not match the package name, and no README mention was available to establish that it belongs to this package. This weakens source transparency.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is supporting evidence rather than decisive, but these figures provide no evidence of a wider active user or contributor base.
The repository is not archived, which avoids a formal abandonment signal, but its last push was over 6 years ago and matches the stale registry history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
scancode-system/variation-module Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.