The package is MIT-licensed, tested, clearly documented, and has no install scripts or registry deprecation. Its small dependency footprint and inactive issue tracker reduce operational concerns, but adoption still carries maintenance risk.
58%
Total Score
50
100
83
83
A single registry maintainer account publishes the package. This is a limited publishing base, though the repository evidence indicates an identifiable individual project rather than an unexplained package source.
The repository is owned by an individual account rather than an organization, so the single-maintainer and low-activity signals are not clearly compensated by organizational backing.
Only five releases have been published since April 2019, with no release in over three years and a median interval of about 254 days. This is significant evidence of slowed maintenance.
There were zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
There are no open issues or pull requests and no recent issue or pull-request activity. This avoids unresolved-maintenance concerns but does not demonstrate active upkeep.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.