Documentation and licensing are in place, and this release includes notes describing its changes. The project has had no release or repository commit activity for more than three years, while its small user footprint and absent security policy add modest maintenance risk.
58%
Total Score
25
88
75
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with no meaningful activity since June 2023. That raises abandonment risk even though the package is not marked archived.
The registry namespace and repository are owned by the same individual account, so the package has direct ownership alignment but no organizational backing shown by this signal. This provides limited maintenance assurance.
The package has 9 releases over roughly five and a half years, but none in the last 12 months and the latest was in June 2023. This is a substantial maintenance concern for a dependency, though the release history is otherwise established.
The repository has no published security policy. This limits transparency about vulnerability reporting and response, but it is a moderate gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.