The package is licensed, documented, tested, and has no install-time scripts. Its small repository has no security policy, no recent commits, and workflows use unpinned actions.
65%
Total Score
50
88
67
The package has had no registry release in more than a year, despite three releases overall and a prior median interval of about 35 days. This indicates a meaningful maintenance slowdown for a young package.
There were no commits and no active maintainers in the last three months, which is a direct sign of limited current maintenance capacity. The repository was pushed more recently, but that does not offset the current inactivity.
The linked repository has no security policy. This is a transparency and maintenance gap, although the small package scope limits how much weight it carries.
Both workflows were analyzed successfully and have no dangerous triggers, untrusted checkouts, or audit findings; however, all three action references are unpinned. That leaves avoidable build-provenance risk, but it is not severe on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tourze/enum-extra Version 0.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.