The package has one registry maintainer, limiting visible maintenance capacity, and it is not marked deprecated. The source repository could not be found through the registry, so maintenance and provenance cannot be checked; treat this as an archival dependency rather than a new integration.
28%
Total Score
50
50
The last release was about 11 years ago, with no releases in the past 12 months. That strongly raises abandonment risk despite the two releases having arrived only 13 days apart.
Only one registry account has publish access. That indicates a thin maintenance base and increases continuity risk, especially alongside the absence of releases for about 11 years.
The latest version, 0.2.0-alpha, is still a prerelease, and all recent releases are prereleases. Combined with the long release gap, this suggests the package never reached a maintained stable release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.