It has an MIT license, a README, repository tests, and a changelog. Its small dependency surface and lack of install scripts reduce exposure, but the project shows no recent maintenance or security policy.
42%
Total Score
25
100
79
75
The latest release was in November 2016, and there have been no releases in nearly 10 years; the three-release history provides little evidence of ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and elevated abandonment risk.
Only one registry maintainer is listed. That is not inherently unhealthy for a small package, but it leaves limited visible publishing redundancy alongside the lack of recent activity.
The repository has 3 stars, 0 forks, and 1 watcher, offering little supporting evidence of a broader community that could sustain the package.
The linked repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap for a package with no recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
clue/graph Version ~0.8.0|~0.9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.