Consumer documentation and basic project structure are present, with tests and a changelog included. The long release gap, no commits in the last three months, and conflicting license signals warrant checking before adoption.
61%
Total Score
50
100
78
83
The manifest declares MIT, while the artifact license file is detected as Apache-2.0; although license files exist in both the artifact and repository, the mismatch requires clarification.
The repository is owned by an individual account rather than an organization, so the single registry maintainer does not show broader organizational backing.
Only two releases span about four years, with a median interval of about 3.9 years; one release in the last 12 months shows the package is not fully abandoned but maintenance is sparse.
There were zero commits and zero active maintainers in the last three months; the recent release provides some compensating evidence, but ongoing development capacity is still unclear.
The repository has zero stars and forks and only one watcher, indicating a very small public support footprint; this is supporting caution rather than proof of poor quality.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.