The package is clearly identified, documented, licensed, and published from an organization-owned repository. Its stable release and exact-version notes help, but the limited maintenance record makes long-term support uncertain; pin and test it carefully.
57%
Total Score
50
83
50
The registry lists one maintainer, which creates a thin publishing base. Organization backing provides some compensation, but it does not demonstrate active individual maintenance.
Only four releases have been published since 2017, with no release in over four years and none in the last 12 months. This is substantial evidence of slowed maintenance, despite the package having reached a stable major version.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap. This lowers confidence in ongoing maintenance capacity.
There were no new or closed issues or pull requests in the last month, while one issue and one pull request remain open. The small amount of unresolved activity adds a modest maintenance concern.
The repository has 8 stars and 2 forks, indicating a small public footprint. Popularity is supporting evidence rather than a verdict, but it provides little external evidence of maturity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.