This is a highly healthy release to depend on: it has a long release history with 969 releases and 160 releases in the last 12 months, is not deprecated, has current repository activity, and is backed by an organization with 15 active maintainers and 366 commits in the last 3 months. The artifact is licensed, typed, free of install-time lifecycle scripts, and has a focused dependency profile; its missing packaged tests and changelog are compensated by repository tests, a repository changelog, and GitHub Releases. The main residual concern is the absence of build provenance attestation, while the repository's pull_request_target workflows warrant review despite read-only token permissions and no detected script-injection or untrusted-checkout patterns.
94%
Total Score
100
100
95
90
50
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rxjs Version 7.8.2 | — | — |
@angular-devkit/architect Version 0.2201.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.