The source is small but complete, with an MIT license file and no install-time scripts. The organization-backed repository is not archived, but the long maintenance gap and license declaration mismatch make this release a poor long-term dependency.
40%
Total Score
50
60
75
This package has only one release, published about 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency expected to receive maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's decade-long release gap. No provided maintenance signal compensates for this inactivity.
An MIT license file is present, so the artifact is licensed, but the manifest declares "Private" while the detected license is MIT. That mismatch reduces publication transparency and warrants caution.
The repository has only 1 star and 2 forks, providing little evidence of broad community review or support. Low popularity is supporting caution rather than a verdict by itself.
The linked repository has no security policy. For an old uploader addon, this leaves vulnerability reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.