The command-line focus, README, tests, and MIT declaration make adoption straightforward. A single maintainer and absent recent commit activity reduce confidence that future fixes will arrive, despite the repository remaining active rather than archived.
58%
Total Score
50
90
100
One registry maintainer creates a thin publishing base and increases dependence on a single person. That is a modest concern for this small command-line tool, not a severe risk by itself.
The package has had no release in over seven years and none in the last 12 months, which is a meaningful maintenance concern for a dependency. Its four historical releases show an established, stable package rather than an abandoned first upload.
There were zero commits and zero active maintainers in the last three months, indicating no recent development activity. This is partly offset by the repository's recorded push in February 2026, but the measured commit window still points to limited maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sumpygump/qi-console Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.