The package includes tests, a license, and no runtime dependencies, which keeps its maintenance burden low. Its only release was over 12 years ago, with no recent commits and just one maintainer, so future fixes and compatibility work are unlikely.
38%
Total Score
38
100
61
75
The package has only one release, published over 12 years ago, with no releases in the last 12 months. This is strong evidence that development has stopped.
There were no commits and no active maintainers in the last three months. Combined with the old last-push date, this indicates that maintenance has effectively ceased.
The repository is not formally archived, but it was last pushed over 12 years ago. That age materially raises abandonment risk despite the repository remaining available.
One registry maintainer is consistent with an individual-owned project, but it provides little contributor redundancy when the repository also shows no recent activity.
The repository is owned by the same individual namespace as the package, so the source ownership is coherent. Individual ownership offers less organizational continuity than a backed project, but no mismatch is indicated.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.