The package is small and clearly documented, with tests, a matching license, and only one runtime dependency. Its source is not archived and the repository matches the package, but maintenance evidence is now dated.
62%
Total Score
50
100
90
50
The latest release was about 15 months ago, and there were no releases in the last 12 months. This is meaningful evidence of slowing maintenance, despite 20 releases over the package's lifetime.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the dated release history. The repository was pushed around 15 months ago, so current maintenance capacity is uncertain.
The linked repository has no security policy. This reduces transparency for reporting and handling issues, though it is a secondary concern for this small library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.