The package has thorough unit and integration tests, release notes, and a matching source repository. Maintenance has stopped since May 2021, with no recent releases or commits; the license also conflicts between GPL-2.0 and GPL-3.0.
58%
Total Score
33
100
63
67
Only two releases were published, and none appeared in the last 12 months despite the package being over five years old. This is strong evidence of a dormant release line.
There were no commits and no active maintainers during the last three months, consistent with the broader evidence that development has stopped.
The manifest declares GPL-2.0 while the repository license file is detected as GPL-3.0. The package is licensed, but the mismatch creates a real adoption and compliance concern.
The repository is owned by the matching Screenfeed user account rather than an organization. This offers limited backing capacity and does not compensate for the inactive development history.
There are no new issues or merged pull requests in the last month, and one pull request remains open. This provides little evidence of active project support.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.