Its tiny scope and single runtime dependency keep integration simple. The repository is identified and not archived, but this release is a poor long-term dependency choice.
38%
Total Score
50
100
70
Only two releases were published, both in September 2017, and there have been no releases in roughly nine years. That strongly raises abandonment risk for a dependency.
The package declares no license, contains no license file, and the repository has no license file. That creates a material legal and adoption barrier for downstream projects.
The repository has recorded no commits and no active maintainers in the past three months, consistent with the last push occurring in September 2017. This provides no evidence of current maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.