Email address and domain validation
72%
Total Score
caution
Usable with caveats: no registry release since January 2024, despite a recent repository push.
The latest registry release was in January 2024, with no releases in the following 12 months, which indicates a slowing release cadence. The repository was pushed recently, so this is a maintenance concern rather than clear abandonment.
All recent commits came from one contributor, leaving the project dependent on a single active individual. Organization backing provides some handoff capacity, but no second recent contributor is shown.
Only one commit from one active maintainer was recorded in the last three months. Recent activity is positive, but the very low volume suggests limited current maintenance capacity.
The repository uses TypeScript for builds, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@hapi/hoek Version ^11.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.