The package includes tests, a working README, and a small dependency footprint. Its license files disagree, and the workflow uses unpinned actions, adding transparency and build-reproducibility concerns.
42%
Total Score
33
100
69
67
The last release was in May 2021, with no releases in the last 12 months and a package age of about 5 years and 5 months. This is strong evidence of abandonment for a library consumers may need maintained.
There were no commits and no active maintainers in the last 3 months; combined with the last push in November 2021, this indicates prolonged inactivity.
The manifest declares MIT, while the artifact LICENSE file was detected as GPL-2.0. The release is licensed, but the mismatch creates a material legal ambiguity for adopters.
Only one registry account has publish access. The repository is user-owned rather than organization-backed, so this represents a thin maintainer base and limited continuity.
There is one open issue and one open pull request, with no new or closed issues or pull requests in the last month. This supports the conclusion that maintenance has stalled.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.