The package has a clear license, readable usage example, and only one runtime dependency. Pin v1.0.3 only if accepting that future fixes and support are unlikely.
38%
Total Score
0
100
67
50
The package has had only two releases, both in October 2020, and none in the last 12 months; this strongly suggests abandonment rather than active maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the latest push being nearly six years ago.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive, but these values provide little supporting evidence of community use or review.
The repository is not archived, but its last push was nearly six years ago; the non-archived status does not compensate for the observed inactivity.
No security policy is present. This is a maintenance and disclosure gap, although the package's small scope limits the significance compared with its long inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.