@cspell/url 10.3.0 appears to be a healthy, actively maintained dependency. It has a strong release cadence with 78 releases over approximately 811 days and 28 releases in the last 12 months, is not deprecated, is backed by an active organization-owned repository, and has recent commits from eight contributors. The package includes an MIT license, type declarations, build provenance, and no install-time lifecycle scripts; the repository also provides tests, changelog coverage, security scanning, and a security policy. The main residual concern is contributor concentration, with one contributor responsible for about 82% of recent commits, alongside some GitHub Actions permission and workflow-hardening gaps, but the organization backing and continued activity materially reduce abandonment risk.
91%
Total Score
90
100
90
100
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.