The organization-backed repository is not archived, and this stable release has published release notes. The tiny artifact and absent security tooling leave limited evidence for long-term support.
58%
Total Score
75
72
83
No license declaration, license file, or detected repository license was found, leaving the terms for using and redistributing this dependency unclear.
The package has five releases over about three and a half years, with only one release in the last 12 months; this shows intermittent rather than strong ongoing maintenance.
There were no commits and no active maintainers in the last three months. Although a release was published during the observed period, the lack of recent development activity weakens maintenance confidence.
The repository name does not match the package name, and no README package mention was available. This creates some uncertainty that the linked repository is the package's dedicated source.
The repository has no stars or forks and only two watchers, so there is little community evidence to support maturity, though popularity is only supporting evidence.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.