The package includes a README, license, tests in the repository, and no install-time scripts. Its alpha status, single release, and no activity for nearly 5 years and 9 months leave maintenance and production-readiness concerns.
35%
Total Score
0
100
67
75
Only one release exists, published nearly 5 years and 9 months ago, with no releases in the last 12 months. This is strong evidence of abandonment for a package still labeled alpha.
The repository had zero commits and zero active maintainers in the last 3 months. Combined with the old last push, this indicates no current maintenance capacity.
The linked repository is not archived, which is a positive counter-signal, but it was last pushed nearly 5 years and 9 months ago and therefore does not offset the stale release history.
The repository has no security policy. This is a transparency gap, although the package's much older maintenance history is the more significant concern.
The assessed version is an alpha pre-release, and all recent releases are pre-releases. The release notes explicitly say it is not recommended for production, which limits its suitability as a dependency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.