mirror of glob, bundled and exposed as ES module including for browser
45%
Total Score
100
50
83
50
50
The package closely resembles glob, with 75% artifact overlap and a README explicitly describing it as a bundled mirror. Its transparent browser-bundling purpose reduces confusion, but consumers may still have intended to install the established glob package.
No build attestation, trusted publisher, or staged publishing evidence was provided, so the published artifact's build path cannot be independently verified.
Seven runtime dependencies are declared, including the original glob and browser-compatible Node modules; this is a meaningful but not excessive dependency surface for a bundled compatibility package.
The prepare install-time script adds execution during installation and increases build-process complexity for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
url Version ^0.11.4 | — | — |
glob Version ^13.0.6 | — | — |
path Version ^0.12.7 | — | — |
buffer Version ^6.0.3 | — | — |
events Version ^3.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.