Risky to adopt: the release has had no new release or repository activity for more than four years, with no users visible through stars or forks. It is licensed, tested, stable, and not deprecated, but the long inactivity and limited project hygiene make future support uncertain.
42%
Total Score
33
100
67
67
The latest release was published more than four years ago, and there were no releases in the preceding 12 months of the observed history. This is a substantial maintenance concern despite the package having nine releases overall.
There were zero commits and zero active maintainers during the last three months of the observed period, following a last push more than four years ago. This is the strongest evidence of abandonment risk.
Only one registry account has publish access. The repository is owned by the same individual, so this is consistent with a small personal project, but it leaves little visible publishing redundancy.
The artifact includes tests, and the repository also has tests, which provides useful evidence of basic project validation. The missing README and changelog reduce consumer documentation, though the absence of a changelog is not itself a packaging defect.
The package and repository are backed by the same individual account rather than an organization. That is coherent ownership, but it provides less continuity than organizational backing when the sole maintainer becomes inactive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.46 | — | — |
yuuan/readonly Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.