Tests, release notes, a clear license, and a matching source repository provide useful transparency. However, the registry has had no release in over six years, recent repository activity is absent, and install-time scripts add maintenance and supply-chain surface.
58%
Total Score
33
100
81
67
The latest registry release was over six years ago, with no releases in the last 12 months. This is a substantial abandonment concern despite the package's longer history.
There were no commits and no active maintainers in the last three months. Combined with the stale registry release, this indicates weak current maintenance.
post-install-cmd and post-update-cmd scripts run during dependency operations, adding avoidable execution and maintenance surface for consumers.
The package and repository are owned by the same individual account, which supports identity matching but provides limited visible organizational backing.
No issues or pull requests were opened or merged in the last month, offering no evidence of active issue handling.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.