Node/Pure JavaScript symmetric ciphers adapter
67%
Total Score
75
100
95
67
100
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern for a cryptography-related library.
One star, zero forks, and one watcher indicate very limited public adoption; popularity is only supporting evidence, but this leaves little external visibility.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.
All 12 analyzed action references are unpinned, creating avoidable workflow supply-chain drift. The reported cache-poisoning finding has low confidence and is hygiene-level here; the audit itself is complete and found no untrusted checkouts or script injection.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.