The package is very small and has no install-time scripts, but provides no security policy or meaningful community activity. Its ownership and repository relationship also need more trust than this release demonstrates.
30%
Total Score
40
75
This is the only release, published about 5 years and 10 months ago, with no releases in the last 12 months. That long period without updates is a substantial abandonment concern.
The package declares no license, includes no license file, and the repository has no license file. This creates a real legal and transparency barrier to adoption.
The published artifact has no README, tests, or changelog. Missing tests and changelog are normal for a published artifact, but the absent README leaves consumers with little usage guidance.
The linked repository name does not match the package name, and no README mention was found. That weakens confidence that the repository is the intended source for this package.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is not required for a healthy package, but these counts provide no supporting evidence of community use or oversight.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.