WASI threads proposal implementation in JavaScript
72%
Total Score
caution
Usable with caveats: active maintenance is offset by broad workflow permissions and unclear package-to-repository linkage.
One contributor made about 73% of the 30 recent commits, leaving maintenance somewhat concentrated, although two additional contributors were active during the same period.
The repository name does not match the package and its README does not mention @emnapi/wasi-threads, making the package-to-source relationship less transparent despite the repository being a broader project.
The repository has no security policy. This is a transparency gap for consumers, though it is not evidence that the package is unsafe.
All three workflows use top-level write permissions and all six analyzed actions are unpinned. No untrusted triggers, checkout risks, or audit findings were detected, so this is a workflow-hygiene caution rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.