The package has a clear MIT license, a readable package, and no install-time scripts. Its sole maintainer and minimal repository activity provide little evidence of continued maintenance.
15%
Total Score
50
50
50
The registry does not mark the package as deprecated, but the package README itself says “UP is deprecated.” That direct project documentation is a serious adoption warning.
This is the package's only release, published about 12 years ago, with no releases in the last 12 months. That strongly indicates abandonment.
The repository is not archived, but it was last pushed about 12 years ago. Its unarchived status does not compensate for the prolonged inactivity.
Only one registry account has publish access, and the repository owner is an individual rather than an organization. This leaves a thin apparent maintenance base.
There have been no new or closed issues or pull requests in the last month, while one issue and one pull request remain open. This is consistent with an inactive project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
smottt/wideimage Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.