The package includes tests, a README, a matching repository, and a stable release, but its last release and commit were in August 2020. The GPL-3.0 declaration conflicts with the detected LGPL-3.0 license, and the repository has no security policy.
54%
Total Score
0
75
50
The latest release was August 18, 2020, with no releases in the last 12 months and 13 releases overall. This long period without updates materially raises abandonment and compatibility concerns.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the package's years-long release gap. The repository is not archived, but there is no observed recent maintenance.
A LICENSE file exists in both the artifact and repository, so licensing is present, but the manifest declares GPL-3.0 while the artifact license text was detected as LGPL-3.0. The mismatch requires clarification before adoption.
The repository has no security policy. For a library that handles an external service API, this is a modest transparency and issue-handling gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.