A simple node js implementation of uuid v4 for use with Braintree's JS based SDKs.
65%
Total Score
caution
Usable with caveats: no commits in three months and workflow audit concerns limit confidence in ongoing maintenance.
The artifact includes a license file and repository license, but the manifest declares ISC while the detected file is MIT; that mismatch should be resolved before adoption.
The package has only four releases since July 2020, with one release in the last 12 months and a median interval of about 13 months, indicating a slow cadence.
There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent package release and repository push.
All five workflows were analyzed and all action references are pinned, but the audit found high-confidence template-injection and archived-action issues plus trusted publishing with a long-lived token; the latter is a concrete supply-chain hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.