The package includes a substantial README, changelog, clear structure, and no install-time scripts. Its single release leaves long-term maintenance unproven, and the repository could not be found for independent verification.
65%
Total Score
100
80
100
The artifact includes a recognized GPL-2.0 license file and declares GPL-2.0-or-later, so the package is clearly licensed. The detected and declared expressions differ slightly, which warrants a minor compatibility check.
This package is 102 days old and has only one release, so there is not enough release history to demonstrate sustained maintenance. That is a meaningful maturity concern, but not evidence of abandonment by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.