The bundle is small, with tests and no install-time scripts, limiting integration and installation concerns. Its stable release, matching repository, and lack of deprecation provide useful traceability, but the proprietary licensing terms may restrict adoption.
38%
Total Score
33
100
72
75
The latest release was published in October 2018, with no releases in the last 12 months; this is substantial evidence of abandonment risk.
There were no commits and no active maintainers in the last three months, consistent with a project that has not received maintenance for years.
The manifest declares a proprietary license, with no recognized license file in the package or repository; this can restrict use and weakens transparency for an open-source dependency.
The repository is owned by an individual user rather than an organization. That does not prove weakness, but it provides no additional organizational maintenance backing.
There was no recent issue or pull-request activity. With no recent commits or releases, this reinforces the lack of ongoing maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.