A set of helpers for running edge-compliant code in Node.js environment
61%
Total Score
caution
Usable with caveats: no registry releases in 21 months and no commits in the last 3 months.
The package has 18 releases since January 2023, but none in the last 12 months and the latest was about 21 months ago, indicating a meaningful maintenance slowdown.
The repository recorded zero commits and zero active maintainers in the last 3 months, which is a direct warning about current maintenance capacity.
There are 28 open issues and 24 open pull requests, but no new or closed issues or pull requests in the last month, consistent with reduced current maintenance activity.
The repository name differs from the package and its README does not mention this package, so package ownership is less transparent even though a monorepo can legitimately contain subpackages.
All 9 action references are unpinned, and the audit found one script-injection issue with high confidence; the remaining cache-poisoning findings are low confidence and the workflows were fully analyzed.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.