The package is focused and documented for its stated cache use, with a small runtime dependency surface. Its repository could not be found, so maintenance and build provenance cannot be checked; the single publisher account adds little resilience.
42%
Total Score
50
100
80
100
The latest release was on July 10, 2019, with no releases in the last 12 months and only two releases overall. This long inactivity is a substantial abandonment concern despite the package reaching a stable major version.
Only one registry publisher account is listed, leaving little visible publishing resilience if that maintainer becomes unavailable. This reinforces the long period without releases.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.