The linked repository does not name or mention this package, weakening confidence that it is the maintained source. It has no security policy, while the README and stable 1.0.0 metadata provide limited reassurance.
45%
Total Score
0
71
50
The package has only one release, published 384 days ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has gone dormant since its initial publication.
The repository name does not match the package name and its README does not mention the package, weakening confidence that this is the package's dedicated source rather than an unrelated or reused repository.
The repository has zero stars and watchers and one fork. Popularity is not required for health, but these counters provide no supporting evidence of community use or oversight.
No security policy was found in the repository. This is a transparency and maintenance gap, though it is less significant than the absence of recent development activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.