3-dimensional physics engine in Rust - official JS bindings. Compatibility package with inlined webassembly as base64.
72%
Total Score
caution
Usable with caveats: 93% of recent commits come from one contributor and the workflows are entirely unpinned.
Six contributors were active in 3 months, but one contributor made 112 of 121 commits, or about 93%, creating meaningful concentration risk.
The repository name does not match this package and its README does not mention it. This may be a monorepo subpackage, but the collected evidence does not directly link the package name to the repository.
No build tool or security scanning tool was detected in the repository, leaving a modest transparency and verification gap despite the active project.
The repository has no security policy, making vulnerability reporting and disclosure expectations less clear.
Version 0.21.0 is not a stable major release and 70% of recent releases are prereleases, so API stability may require more care despite the current release not being a prerelease.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.