Treat multiple buffers as one
68%
Total Score
caution
Usable with caveats: no registry release since February 2023 raises maintenance concerns.
No build attestation or trusted-publisher provenance is available. This limits publication transparency, though it is not by itself evidence of poor maintenance.
The package has five releases since April 2019, but none in the last 12 months and the latest registry release was in February 2023. This materially raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful sign of reduced ongoing maintenance, partially offset by the recent push timestamp.
There is one open issue and one open pull request, but no issues or pull requests were opened or closed in the last month, indicating limited current activity.
The repository reports no build tools and no security scanning tools. For a small package this is not severe, but it weakens automated quality and security oversight.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@hapi/hoek Version ^11.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.