The package has a coherent, very small source tree and an organization-owned repository, but it lacks a license and consumer documentation. Its maintenance evidence is especially weak, with no activity since 2020 and no tests or security policy.
34%
Total Score
50
100
61
83
This is the package's only release, published more than five years ago, with no releases in the last 12 months. That strongly increases abandonment risk despite the stable version.
There were zero commits and zero active maintainers in the last three months, following a last push in 2020. This is strong evidence that maintenance has stopped.
No declared license, license file, or repository license file was detected. That creates a real legal and transparency obstacle for dependency adoption.
The package has no README, tests, or changelog, although the missing tests and changelog are normal for published artifacts. A GitHub release exists for this version, but it has no release notes.
There are no open issues or pull requests and no recent issue or pull-request activity. While this could reflect a stable project, together with zero commits it is more consistent with abandonment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.