35%
Total Score
unhealthy
Risky: no releases or commits since August 2017, with no tests and no package mention in the repository.
The package has had no releases in more than 9 years, with five releases total and none in the last 12 months. This strongly suggests abandonment despite the stable version currently published.
The repository recorded zero commits and zero active maintainers in the last 3 months, and its last push was in August 2017. The long period without observed activity is a substantial maintenance concern.
The artifact includes a README, but it is only 10 characters long and provides effectively no consumer guidance. The absence of tests and a changelog is normal for published artifacts and is not penalized here; the GitHub release provides some release transparency.
The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked source repository clearly documents and supports this release.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This matters more for an old integration library with no recent maintenance evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.