A performant and standard (Bluebird) library that registers a node-style callback on a promise
62%
Total Score
100
92
100
50
No build attestation or trusted publisher provenance is available, leaving publication origin less verifiable. This is a transparency weakness rather than evidence that the package is unsafe.
The package has only one release, published about 4 years and 6 months ago, with no releases in the last 12 months. Its small, stable scope may reduce the need for frequent releases, but this still weakens evidence of active maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.