This release appears healthy and suitable to depend on. It has a long release history with eight releases in the last 12 months, active and broad repository contribution, current non-archived project backing, reproducible npm provenance, minimal runtime dependencies, and strong repository security and workflow hygiene. The package artifact is intentionally small and lacks packaged tests and a changelog, but the linked repository contains both and uses GitHub Releases, which compensates for those artifact-level gaps. The main transparency concern is that the linked monorepo neither matches the package name nor mentions it in its README, though the organization-backed repository and matching @changesets namespace provide substantial context that this is a legitimate monorepo subpackage.
94%
Total Score
100
100
95
100
100
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dataloader Version ^2.2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.