Package Health

@asyncapi/parser

JavaScript AsyncAPI parser.

Latest 3.6.4NPMNPM

86%

Total Score

healthy

Active releases and organization-backed maintenance outweigh workflow hygiene concerns.

Are you affected? Scan for Free
Malware icon

Malware detected in 2 versions

Latest:v3.4.2, detected 10 months ago

Health Score Breakdown

Package scaffoldingcaution

The published artifact lacks a README, but the repository has tests, a changelog, and a GitHub release note for this exact version. The missing artifact README is a minor consumer-documentation gap, not evidence of poor maintenance.

Workflow auditcaution

All 25 workflows were analyzed with no untrusted checkouts or script injection, and 24 use read-only permissions. However, high-confidence findings include archived actions and ad hoc package installs, while 25 of 107 action references are unpinned; the low-confidence cache finding is hygiene only.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
ajv
Version ^8.18.0
—
—
js-yaml
Version ^4.3.2
—
—
ajv-errors
Version ^3.0.0
—
—
node-fetch
Version 2.6.7
—
—
ajv-formats
Version ^2.1.1
—
—

Weekly Downloads

Info

Last Published
2 days ago
Created
6 years ago
Unpacked Size
3 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform