The package has only one runtime dependency and a matching, non-archived source repository. Its tiny footprint does not offset the lack of maintenance or release documentation, making this release unsuitable for a new dependency.
12%
Total Score
50
100
67
83
This package has had one release, published nearly 14 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency at this version.
The repository has zero commits and zero active maintainers in the last three months, consistent with its last push occurring nearly 14 years ago. This is a severe maintenance and abandonment concern.
The artifact has no README, tests, or changelog, and the repository has none of those project files either. The missing tests and changelog are expected packaging gaps, but the missing README reduces consumer transparency for a validation library.
There are no open issues or pull requests and no recent issue or pull-request activity. While orderly, this provides no evidence of ongoing maintenance.
The repository has 2 stars, 0 forks, and 1 watcher, indicating a very small user and contributor footprint. Popularity is supporting evidence rather than the main concern, but it offers little backing against abandonment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sledgehammer/core Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.