The source is identifiable, licensed, and has a focused two-dependency footprint. The missing security policy leaves limited guidance if this API needs maintenance or a security fix.
38%
Total Score
0
100
75
75
The package has had only one release, published about 7 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, although a stable API could explain some inactivity.
There were no commits and no active maintainers in the last 3 months, consistent with the last repository push being about 7 years ago. This materially raises the chance that defects will not be fixed.
The repository has no security policy. For an API integration package, this makes vulnerability reporting and response expectations less transparent.
Version v0.4 is not a stable major release, and the package has no subsequent releases to show maturation. The long-lived single release makes compatibility expectations less clear.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.