A module for downloading ripgrep at runtime a Node project
58%
Total Score
33
50
75
80
50
The repository recorded zero commits and zero active maintainers over the last three months, a concrete sign that maintenance has recently stalled.
No build attestation, trusted publisher, or staged publishing evidence is present, leaving the relationship between source and published artifact less verifiable.
Seven runtime dependencies create a moderate maintenance and supply-chain surface for a small utility module, though the signal does not show an excessive dependency footprint.
The package and repository are backed by the same individual account, but there is no organization backing or broader project structure to compensate for the narrow maintainer base.
Three releases over roughly one year, with one release in the last 12 months, show some maintenance but a limited release history for a 0.x package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
got Version ^14.4.5 | — | — |
execa Version ^9.5.2 | — | — |
fs-extra Version ^11.3.0 | — | — |
extract-zip Version ^2.0.1 | — | — |
path-exists Version ^5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.