The package has a clear README, matching repository, explicit GPL licensing, and no install-time scripts. Its single-maintainer project has no tests or security policy, and recent repository activity is absent. Pin the exact version and verify compatibility with current dependencies.
45%
Total Score
38
50
63
83
The package has had 5 releases since May 2019, but the latest was in June 2022 and there were no releases in the last 12 months. This long release gap is a substantial maintenance concern.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the older latest release, this supports a strong concern that maintenance has stalled.
The package declares 4 runtime dependencies, including bitcoin, socket, and HTTP libraries. This is a meaningful dependency surface for a small library, though the signal shows no inherently unusual dependency pattern.
Only one registry account, webworker01, has publish access. This is not proof of abandonment, but it indicates a single point of failure for publishing and maintenance.
The package includes a 1,717-character README and publishes GitHub releases, which supports basic consumer transparency. Tests and a changelog are absent, but those are normal omissions from a published package artifact; the repository also reports no tests or changelog.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bitwasp/bitcoin Version ^1.0 | — | — |
clue/socket-raw Version ^1.3 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.