Usable with caveats: the package is licensed, well-documented, tested in its repository, and has safe build workflows. However, it has had no release or commit activity for over five years, so future compatibility and maintenance support are uncertain.
60%
Total Score
50
100
83
80
The registry namespace and repository owner match, providing consistent ownership evidence. The project is user-owned rather than organization-backed, so the single publisher account offers limited visible organizational redundancy.
The package has 9 releases since 2017, but the latest release was over five years ago and there were no releases in the last 12 months. This indicates a mature but inactive release stream.
There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive for over five years and increasing abandonment risk.
The repository has 20 stars and 1 fork. This is modest supporting adoption evidence, but popularity is limited and does not offset the lack of recent maintenance.
The linked repository is not archived, but its last push was over five years ago. The unarchived status is reassuring, while the age of the last push reinforces the maintenance concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.