The package is MIT-licensed, has a README, and installs without lifecycle scripts. With only two releases, no release in nearly 10 years, and the repository could not be found, maintenance and provenance are too uncertain.
38%
Total Score
100
70
100
The package has only two releases, both published in 2016, with no releases in nearly 10 years. That is strong evidence of abandonment risk for a dependency.
Version v0.1.1 is not a stable major release, which adds maturity and compatibility uncertainty. Its long unchanged history provides no compensating evidence of active stabilization.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.