Its MIT licensing, organization-backed repository, and clean install and workflow profile reduce adoption friction. The project is small and has no tests, changelog, security policy, or release follow-up, so maintenance risk remains significant.
48%
Total Score
100
63
75
This package has only one release, published about five years ago, with no releases in the last 12 months. That is strong evidence of limited ongoing maintenance, despite the package not being deprecated.
The artifact has no README, which is a minor documentation gap for a framework skeleton. The absence of tests and a changelog is normal for published artifacts and is not counted against it.
The linked repository has no security policy, leaving vulnerability-reporting expectations unclear. The small project size does not compensate for this transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
universe/universe Version dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.