The package has clear documentation, tests, release notes, a license, and a narrow dependency set. Its small maintainer base and quiet recent development reduce confidence in ongoing support.
65%
Total Score
63
100
94
67
Only one registry account has publish access. This is not an ownership verdict, but it leaves little visible publishing redundancy for a user-owned project.
The package has 19 releases over about 6 years, but none in the last 12 months; its latest registry release was about 2 years ago. That is a meaningful maintenance concern.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with no registry releases in the last 12 months, this points to reduced ongoing maintenance.
There are four open issues and two open pull requests, but no new or closed issues or pull requests in the last month, indicating limited visible responsiveness.
No repository security policy is present. This is a transparency gap, though it is less significant for a small parser library than for a service handling sensitive data.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.