Risky to adopt: this package has had only one release, nearly 10 years ago, and no repository commits in over 8 years. It has a clear license, usable README, and a matching source repository, but maintenance appears effectively abandoned.
42%
Total Score
0
69
83
There has been only one release, published nearly 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency that may need compatibility or bug fixes.
The repository had no commits and no active maintainers in the last 3 months. Combined with the old last push, this indicates that ongoing maintenance is unlikely.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external signal of adoption or community support.
The repository is not formally archived, which is a positive, but it was last pushed over 8 years ago. The non-archived status does not offset the lack of recent maintenance.
The repository has no security policy. This is a transparency gap, although the package's small, stale codebase means the dominant concern remains abandonment rather than missing security-process documentation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.