The declared GPL-2.0-or-later license conflicts with the MIT text found in the artifact. The package includes a substantial README and no install-time scripts, but maintenance evidence is limited to its initial release.
35%
Total Score
100
63
100
This is the package’s only release, published 604 days ago, with no releases in the last 12 months. That provides strong abandonment risk and outweighs the otherwise stable version label.
The manifest declares GPL-2.0-or-later, while the detected artifact license is MIT and the included license files belong under vendor directories. This mismatch creates meaningful licensing uncertainty for adopters.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.