55%
Total Score
caution
Only two releases and no commits in the past three months point to a thin, potentially stalled maintenance record.
The repository recorded 0 commits and 0 active maintainers during the past 3 months. Combined with no releases in the past year, this points to stalled or very limited maintenance.
Only one registry publishing account, "ghost", is listed. The linked repository is user-owned rather than organization-backed, so there is little visible publishing redundancy.
The registry namespace and repository owner are different user accounts, and the repository owner type is User rather than Organization. The separate repo_package_mention signal confirms the repository matches and mentions the package, which reduces concern about repository misattribution but does not show organizational backing.
The package has only 2 releases, both published about 15 months ago, with 0 releases in the last 12 months. This is a significant maintenance concern for a dependency, despite the short interval between its initial releases.
The repository has 10 stars, 0 forks, and 1 watcher. This is modest supporting evidence and does not independently make the package unsafe, but it indicates a small user and contributor base.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.