The package is small and focused, with tests, a matching repository, a clean license, and release notes for version 2.0. Its long inactivity, one-person backing, absent security policy, and unpinned workflow actions warrant caution for new adoption.
58%
Total Score
50
100
78
83
There were no commits or active maintainers in the last three months, and the repository's last push was in 2022; this materially raises abandonment risk.
One registry maintainer is a thin publishing base, and the repository is owned by the same individual rather than an organization, limiting visible continuity.
The registry namespace and repository owner match, but the owner is an individual rather than an organization, so there is limited visible project backing.
Seven releases since August 2020 show an initially regular cadence, but no release has appeared in more than four years, indicating current abandonment risk.
One star and no forks provide little external validation or evidence of a broad user community, though popularity is supporting evidence only.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.