The package is easy to inspect, with a clear README, changelog, MIT license, and minimal runtime surface. No release or repository activity for about 8 years and 10 months makes ongoing compatibility and support uncertain.
42%
Total Score
100
75
100
The package has had only two releases, both in November 2017, with no releases in the last 12 months and no update for about 8 years and 10 months. This is strong evidence of abandonment risk for a dependency, despite the package being small and stable.
The repository has zero stars and forks and only one watcher. Popularity is not required for a small utility, but these figures provide no supporting evidence of an active user or contributor community.
The repository is not archived, which is a positive counter-signal, but it was last pushed in November 2017 and shows no newer source activity. The visible repository remains available without evidence of active maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.