55%
Total Score
caution
No releases or repository commits have appeared since November 2022, despite a stable package with tests and MIT licensing.
The package has 11 releases since June 2018, but none in the last 12 months and the latest release was in November 2022. This is a substantial maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the latest release being in November 2022. This is the strongest evidence of abandonment risk.
Only one registry account has publish access. That is a thin publishing base, but the project is backed by an organization, so this is more consistent with centralized publishing hygiene than an immediate abandonment signal.
The artifact includes tests, and the repository also has tests, which supports basic reliability. The missing README reduces consumer guidance for this library, while the absent changelog is normal packaging practice.
The repository has 1 star, 1 fork, and 2 watchers. Low popularity is supporting caution rather than a verdict, and it reinforces the lack of visible adoption signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
oktopost/skeleton Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.