Abstraction over common javascript date management libraries
62%
Total Score
caution
Usable with caveats: nearly two years without a release and no commits in the last 3 months point to slowing maintenance.
No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable.
The package has 45 releases over about seven years, but no releases in the last 12 months and its latest release was in December 2024, indicating a substantial slowdown.
The repository recorded zero commits and zero active maintainers in the last 3 months, which is evidence of currently inactive maintenance despite the repository being unarchived.
The project uses npm scripts, Rollup, and TypeScript, but no security scanning tooling was detected, leaving a modest hygiene gap.
The repository has no security policy, so there is no documented process for reporting or handling security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@date-io/core Version ^3.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.