This release appears to be a very healthy dependency: it has been maintained for nearly 10 years, has 735 releases including 104 in the last 12 months, is not deprecated, and is backed by an active organization-owned repository. The source repository shows 216 commits and 16 active maintainers in the last 3 months, with substantial issue and pull-request throughput, repository tests and changelog coverage, a security policy, and explicit workflow permissions. The main residual concerns are the lack of build provenance attestations and dedicated security-scanning tools, plus some workflows with write permissions and pull-request or workflow-run triggers; however, no analyzed workflow showed untrusted checkout or script-injection patterns, and these concerns do not outweigh the strong maintenance and project-backing evidence.
94%
Total Score
100
100
94
80
50
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.