The tiny artifact offers almost no consumer guidance, and its licensing is unclear. The repository is not archived and has a matching name, but there is no evidence of ongoing maintenance.
28%
Total Score
0
38
50
This is the package's only release, published nearly 10 years ago, with no releases in the last 12 months. That makes compatibility and maintenance effectively unproven.
The repository has had zero commits and zero active maintainers in the last 3 months, and it was last pushed in May 2016. This is strong evidence of abandonment risk.
No license is declared and no license file was detected in either the package or repository. That leaves the legal terms for using this dependency unclear.
Although a README exists, it is only six characters long and contains “# TODO,” offering virtually no usage or integration guidance. The absence of tests and a changelog is normal for a published artifact and is not counted against it.
The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these figures provide no meaningful community or adoption signal.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.