It has a clear MIT license, a usable README, release notes, and no install-time scripts. The minimal repository and lack of security tooling leave little evidence of ongoing care for a dependency that may need future fixes.
42%
Total Score
33
67
67
Only two releases were published, with the latest released in September 2018 and none in the last 12 months. This long period without releases is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last three months. Combined with the last push in 2018, this materially increases abandonment risk.
The artifact and repository contain a small, matching five-file tree, including the source, manifest, README, example, and license. This is coherent for a small library, though it provides little evidence of broader engineering depth.
The package is backed by an individual repository owner rather than an organization, so the very small maintainer base offers limited visible continuity if the original author stops maintaining it.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a quiet project, but does not demonstrate active maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.