The package also has no license or README, and its repository has no security policy. Its stable version and lack of install scripts provide limited reassurance, but not enough to offset the long maintenance gap.
42%
Total Score
50
64
100
The package has had no release in nearly six years, despite nine releases overall; this is strong evidence of abandonment risk for a dependency.
No registry license declaration or license file was detected in the package or repository, leaving the legal terms for adoption unclear.
Only one registry account has publishing access. With no organization backing shown, this leaves a thin publishing base, although access records alone do not establish actual maintenance activity.
The published artifact has no README, tests, or changelog, and the repository provides none either. The missing tests and changelog are normal for an artifact, but the absent README reduces consumer transparency.
The repository has zero stars and forks and only one watcher, offering little supporting evidence of an active user or contributor community.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.