Expa
42%
Total Score
33
100
67
67
Only two releases were published, both within about one day, followed by no releases for more than three years. This is strong evidence of abandonment despite the package not being registry-deprecated.
There were zero commits and zero active maintainers in the last three months, consistent with the repository having been inactive since February 2023. This materially raises abandonment risk.
One registry account has publish access, which is consistent with an individual-owned package. It offers limited resilience, but repository activity rather than access records is the stronger maintenance evidence here.
The artifact and repository match and contain eight files, including source code, a manifest, and documentation. This is transparent but provides little project depth or maintenance evidence.
The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to offset the single-maintainer and inactivity concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.