@es-joy/jsdoccomment
Maintained replacement for ESLint's deprecated SourceCode#getJSDocComment along with other jsdoc utilities
88%
Total Score
88
100
94
75
Health Score Breakdown
The top contributor made 31 of 36 recent commits, creating concentration risk, but two additional contributors were active and the repository is organization-owned.
The project uses TypeScript, Vitest, Babel, and npm scripts, but no security-scanning tools were detected; this is a modest transparency and hygiene gap.
No repository security policy was found, leaving vulnerability-reporting expectations undocumented.
The single workflow was fully analyzed with no injection, untrusted-checkout, or auditor findings. However, both action references are unpinned, so their versions are not fixed for reproducible workflow execution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 esquery Version ^1.7.0 | — | — |
@types/estree Version ^1.0.9 | — | — |
comment-parser Version 1.4.9 | — | — |
jsdoc-type-pratt-parser Version ~9.2.2 | — | — |
@typescript-eslint/types Version ^8.70.0 | — | — |
Weekly Downloads
Info
- Last Published
- 24 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.