@dagrejs/graphlib
A directed and undirected multi-graph library
82%
Total Score
healthy
Healthy: regular releases and an active, organization-backed repository outweigh limited security and workflow hygiene.
Health Score Breakdown
No build attestation or trusted-publisher provenance is available. This leaves publication origin less transparent despite the package's otherwise active release history.
The repository has 28 open issues and no issues closed in the last month, although five pull requests were opened. This is a mild process concern rather than evidence of abandonment.
The project uses TypeScript, esbuild, npm scripts, and Make, but no security-scanning tools were detected. The build is structured, with limited dedicated security monitoring.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both of its two action references are unpinned, which weakens build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 8 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.