Jest's reporters
88%
Total Score
90
100
89
83
One contributor made about 96% of the 73 recent commits, leaving maintenance heavily concentrated despite organization backing and two additional active contributors.
The repository name does not match this scoped package and its README does not mention it, creating some uncertainty about the package-to-repository link; the mismatch is also consistent with a monorepo sub-package.
The project uses established build tools, but no security scanning tools were detected, leaving a modest security-process gap.
All 11 workflows were analyzed, all 48 action references are pinned, and no untrusted checkout or script-injection paths were found. The audit still identifies high-confidence use of long-lived registry publishing credentials, which is a workflow hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
glob Version ^13.0.6 | — | — |
chalk Version ^4.1.2 | — | — |
slash Version ^3.0.0 | — | — |
exit-x Version ^0.2.2 | — | — |
jest-util Version 30.5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.