The ESM-only 'color' package made compatible for use with CommonJS runtimes
62%
Total Score
caution
Usable with caveats: one recent contributor and workflow injection and unpinned-action issues limit confidence.
The repository is owned by a named individual rather than an organization, so there is no organizational handoff capacity to offset the concentrated maintainer base.
The package has four releases over about one year, but only one release in the last 12 months, indicating a modest maintenance cadence for a compatibility package.
All recent activity came from one contributor, so maintenance depends heavily on a single person; the repository is user-owned rather than organization-backed.
Only one commit was recorded in the last three months, showing limited recent development activity.
The repository has no security policy, leaving reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.