A single registry maintainer and an unmatched repository leave limited evidence of ongoing support. The artifact is clearly licensed and has no install-time scripts, but it lacks a consumer README.
56%
Total Score
50
79
100
Only one registry account has publish access, leaving little visible publishing redundancy or maintainer capacity.
The package has no README, which is a meaningful consumer-documentation gap for a library, although release notes for this version provide some change context.
The package has had no release in over two years, despite nine releases overall, which indicates a substantial maintenance slowdown.
The repository recorded zero commits and zero active maintainers in the last three months; combined with the old latest release, this raises abandonment risk.
The repository name does not match the package name, and no README mention was found, so the repository's ownership of this package is less transparent.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.