The artifact is minimal, with a README, matching repository, and one runtime dependency. It has no install scripts or registry deprecation, which limits operational concerns. Adoption still carries substantial long-term maintenance and legal uncertainty.
38%
Total Score
0
100
71
83
The package has had no release in about 10 years: all six releases occurred on 6 October 2016, with none in the last 12 months. That strongly indicates abandonment despite its stable version.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push having occurred in October 2016. No provided signal shows ongoing maintenance capacity.
Neither the package nor the linked repository declares or contains a recognized license. This creates a material legal and transparency concern for dependency adoption.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these figures provide no supporting evidence of community attention or external maintenance.
The linked repository has no security policy. For a small, inactive package this adds to the lack of maintenance transparency, although it is less serious than the absence of recent activity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.