The single registry maintainer, zero repository activity, and absent license reduce confidence in long-term support and reuse rights. Stable versioning, no deprecation, and no install-time scripts provide limited reassurance.
38%
Total Score
50
67
100
The latest release was in July 2021, with no releases in the following five years; this is strong evidence of abandonment risk despite nine releases and a regular earlier cadence.
No declared license or license file was found, leaving the legal terms for using this package unclear.
Only one registry account has publish access, which creates a thin publishing base; the repository is user-owned rather than clearly organization-backed, so there is no provided compensating evidence.
There were no new or closed issues or pull requests in the last month, consistent with the long period of inactivity, although a quiet issue tracker alone would not be severe.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no evidence of a broad support community.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.