Risky to adopt: the package has not released since December 2015 and its repository has seen no push since August 2017. It is not deprecated or archived and has a minimal dependency footprint, but the long inactivity and weak repository linkage make abandonment and ownership concerns significant.
40%
Total Score
100
63
83
The latest release was published in December 2015, with no releases in the last 12 months despite the package being about 12 years old. This is strong evidence of abandonment risk for a library dependency.
The artifact includes a README, but it is only 433 characters and contains an ASCII logo rather than useful integration guidance. The absence of tests and a changelog in the published artifact is normal packaging practice and is not counted against it.
The repository name does not match the package name and its README does not mention the package. A name mismatch can be normal for subpackages, but the absence of any README reference leaves ownership and packaging provenance unclear.
The repository has only 4 stars, 3 forks, and no watchers, providing little evidence of community review or ongoing adoption. Low popularity alone is not disqualifying, but it offers no meaningful compensation for the inactivity.
The repository is not archived, which is a positive status, but its last push was in August 2017 and does not compensate for the package's long release inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.