@changesets/changelog-github
@changesets/changelog-github 1.0.1 appears to be a healthy dependency with a long release history, recent and frequent releases, active development in a non-archived organization-owned repository, broad contributor participation, build provenance, security tooling, and read-only workflow permissions. The package artifact is minimal and omits tests, a changelog, and type declarations, but the linked repository provides tests and a changelog, while the package's focused changelog-generator role makes the missing declarations less serious. The main transparency concern is that the linked monorepo neither matches the package name nor mentions it in its README, so the package-to-repository association warrants verification despite the otherwise strong project backing.
88%
Total Score
100
100
90
100
100
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @changesets/types Version ^7.0.0 | — | — |
@changesets/get-github-info Version ^1.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 6 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.