The README is only 15 characters, with no repository tests or security policy. The declared MIT license conflicts with the Apache-2.0 license file, while the package has seen no release activity for over nine years.
38%
Total Score
50
100
56
75
The package has made no release in over nine years, with four releases overall and none in the last 12 months; this is strong evidence of abandonment risk.
A license file is present, but it identifies Apache-2.0 while the manifest declares MIT. That mismatch reduces transparency about the terms governing this release.
The package includes a README, but it is only 15 characters and provides virtually no consumer guidance. Missing tests and changelog files are normal for published artifacts and are not counted against it.
There were no new issues or pull requests in the last month and no merged pull requests, consistent with the package's long maintenance gap.
The repository has zero stars and forks and only one watcher, providing little evidence of an active user or contributor community. Popularity is supporting evidence rather than decisive on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.