@changesets/errors
Its MIT license, npm provenance, and active organization-backed repository provide strong transparency and maintenance capacity. Recent release notes and a clear README also support dependable adoption.
84%
Total Score
100
89
75
100
Health Score Breakdown
The repository name does not match this sub-package and its README does not mention it, creating some uncertainty about package-to-repository linkage; the organization and monorepo context provide partial compensation.
The signal reports no recognized type declarations, which is a real integration gap for a TypeScript-consumed library despite the package containing compiled module files.
All 3 workflows were analyzed, use read-only permissions, and have no unpinned actions or untrusted checkout findings. The high-confidence trusted-publishing finding is a mild workflow hygiene concern, not a severe risk here.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 7 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.