The artifact is minimal and easy to inspect, with no install-time scripts and a very small dependency surface. Licensing files are present, but verify that the GPL/LGPL combination fits your project.
61%
Total Score
50
100
71
75
The package declares LGPL-3.0-or-later and includes COPYING and COPYING.LESSER files, so it is licensed. The artifact also detects GPL-3.0, which is broader than the declaration and warrants checking the applicable terms.
The package and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing or broader maintenance capacity.
The package has only 3 releases since November 2018, with no releases in the last 12 months and a median interval of about 781 days. This indicates slow maintenance and lowers confidence in ongoing support.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the old latest release, this is evidence of little current maintenance.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these figures provide no external sign of a broad support community.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.