Its small six-file artifact is easy to inspect, and the repository matches the package. The absence of current project activity makes adopting this release a liability.
38%
Total Score
25
100
79
75
The package has had no release in more than 7 years: its latest release was June 24, 2019, with zero releases in the last 12 months. This is strong evidence of abandonment for a dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and leaving no evidence of current maintenance capacity.
There has been no issue or pull-request activity in the last month, while one issue remains open. This is a smaller concern than the absent release and commit activity but provides no sign of ongoing support.
The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no additional indication of community adoption or maintenance support.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less significant than the abandonment signals.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.