The package includes a license and no install-time scripts, reducing licensing and installation concerns. Its single-maintainer footprint, minimal documentation, absent security policy, and prolonged inactivity leave little evidence of ongoing oversight.
38%
Total Score
33
75
83
The latest release was in November 2022, with zero releases in the following 12 months; nearly four years without a release is strong evidence of abandonment risk.
There were no commits or active maintainers in the last three months, consistent with the repository having been inactive since November 2022 and materially increasing abandonment risk.
Only one registry publishing maintainer is listed, leaving a thin publishing base; the linked repository is user-owned rather than organization-backed, so there is little visible redundancy.
The artifact includes a README, but it is only 16 characters long; the absence of tests and a changelog is normal for a published artifact and is not treated as a gap.
The repository is owned by an individual account, so there is no provided evidence of organizational backing to compensate for the single-maintainer and inactivity concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.