The library has a clear MIT declaration, a small runtime dependency set, and comprehensive tests. Its lack of security tooling and documentation adds transparency risk, but the long-standing absence of maintenance is the main concern.
31%
Total Score
33
100
50
75
Only two releases were published, both in late 2018, and there have been no releases in more than seven years. This is strong evidence of abandonment for a library dependency.
There were zero commits and zero active maintainers in the last three months, following the last repository push in 2018. This is strong evidence that maintenance has stopped.
The repository is not archived, but it was last pushed on December 1, 2018. The non-archived status does not compensate for the prolonged inactivity.
The published artifact has tests and the repository contains test coverage, which supports basic project maturity. The missing README is a minor consumer-documentation gap for this library.
The repository is owned by an individual user rather than an organization, and no organizational backing is shown. That leaves limited visible maintenance capacity alongside the observed inactivity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.