The library is small, documented, tested, and clearly licensed for use. Its focused dependencies and matching organization-owned repository make it straightforward to evaluate and integrate.
60%
Total Score
75
100
90
83
The package has only two releases, with the latest published about 12 years ago and none in the last 12 months. This is a meaningful maintenance concern, partly offset by the repository having been pushed in 2023.
There were no commits and no active maintainers in the last 3 months, indicating little current development activity. The repository's 2023 push shows it is not completely abandoned, but does not establish active maintenance.
The repository has no published security policy. For a small utility this is a transparency gap, though it does not by itself indicate that the package is unsafe to depend on.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.