@changesets/git 4.0.1 appears to be a healthy dependency: it has a long release history with 11 releases in the last 12 months, is not deprecated, has current repository activity, broad recent contributor participation, organization backing, build provenance, security scanning, and restrictive workflow permissions. The package is small and omits packaged tests and a changelog, but the linked repository contains both, and the reported lack of type declarations is partly contradicted by the packaged dist/index.d.mts file. The repository/package mention check is a minor transparency concern because the repository neither matches the package name nor mentions it in its README, although the organization-backed monorepo context and strong activity substantially reduce that concern.
93%
Total Score
100
100
95
100
100
The repository name does not match the package and its README does not mention @changesets/git, creating a minor package-to-source transparency concern. The organization-backed repository and monorepo-scale file tree provide substantial compensating context, but the indicator still warrants caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tinyexec Version ^1.3.0 | — | — |
picomatch Version ^4.0.4 | — | — |
@changesets/types Version ^7.0.0 | — | — |
@changesets/errors Version ^1.0.0 | — | — |
@manypkg/get-packages Version ^3.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.