The package has a clear readme, an MIT declaration, and no install-time scripts. Its pre-1.0 status, no release in 16 months, and one-person publishing base make long-term maintenance uncertain; the repository could not be found for verification.
46%
Total Score
50
100
80
100
Only one account has publishing access. That does not prove abandonment, but it leaves limited visible publishing capacity and increases continuity risk when release activity has already stopped.
The package has 11 releases over nearly four years, but none in the last 12 months; the last release was about 16 months ago. Its earlier release cadence partly offsets, but does not remove, the current maintenance concern.
The latest version is v0.6.1, so the package remains below a stable 1.0 release. It is not marked as a prerelease, which provides some compensation but does not eliminate compatibility risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
snkeng/sources Version dev-master | — | — |
mustache/mustache Version ^v2.14.2 | — | — |
matthiasmullie/minify Version ^1.3.71 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.