Clear packaging and security documentation reduce adoption friction. The organization-backed project is actively maintained, though recent commits come from one contributor and the license file also identifies GPL-3.0 alongside the declared LGPL license.
84%
Total Score
83
100
93
100
The artifact declares LGPL-3.0-or-later and includes a license file, but the detected file text also identifies GPL-3.0, which is not explicitly covered by the declaration. This creates a modest licensing clarification concern.
All 18 recent commits came from one contributor, so maintenance continuity depends heavily on a single person. Organization ownership provides some handoff capacity, but no second active contributor is shown.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.