The 37-character README and absence of tests, changelog, or security policy leave little documentation or assurance for a framework. The single maintainer and one-star repository also provide limited support capacity.
35%
Total Score
25
50
50
The package has made no releases in about five years; all six releases arrived within roughly one day in April 2021, indicating likely abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving maintenance uncertain.
The manifest declares MIT, but the artifact license file and repository license are detected as Apache-2.0. This mismatch creates avoidable legal uncertainty for consumers.
Only one registry maintainer is listed, and the repository is owned by an individual account rather than an organization. This provides limited visible support capacity alongside the inactive project.
The package includes a very short 37-character README but no tests or changelog. Missing tests and changelog are normal in published artifacts, while the minimal consumer documentation is a modest concern for a framework.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.