Risky to adopt: the package has had no release or repository activity since March 2022, and its linked repository does not match the package name or identify it in a README. It is not deprecated or archived and has a declared MIT license, but the long silence and minimal documentation make abandonment a real concern.
38%
Total Score
25
50
50
The latest release was about 4 years ago, with no releases in the last 12 months and only four releases overall. That long release gap is a significant maintenance concern for a package still at version 0.0.4.
There were no commits and no active maintainers in the last 3 months. Combined with the last push in March 2022, this indicates that maintenance has effectively stopped.
The artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. The absence of tests and change documentation weakens transparency, while the missing README makes adoption and integration harder for this library.
The package is under the zls namespace while the linked repository is owned by an individual account, so the available ownership context does not show strong organizational backing. This provides little evidence of continuity if the sole publisher stops maintaining it.
The repository name does not match the package name, and no README package mention was available. This raises some uncertainty about whether the linked repository is the authoritative project source.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zls/action Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.