Its documentation is minimal, and the repository has no security policy or scanning. The package is not deprecated and has no install-time scripts, but those positives do not offset the long inactivity.
30%
Total Score
0
64
75
This is the package's only release, published about five years ago, with no releases in the past 12 months. That strongly indicates abandonment risk.
The repository recorded no commits and no active maintainers in the past three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
Neither the package metadata nor the repository contains a recognized license or license file, creating a material adoption and redistribution risk.
The repository name matches the package, which is reassuring, but its README does not mention the package. This leaves a small transparency gap about the artifact's source relationship.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but this provides no supporting evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
toom1996/goblin Version dev-main | — | — |
nikic/fast-route Version 2.0.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.