Trace the original position through a source map
78%
Total Score
50
100
89
80
The package and repository are owned by the same individual account, so the single-maintainer concentration is not offset by organization-level ownership.
The package has 43 releases over about 4 years, but it has had no registry release in the last 12 months despite a latest release in September 2025; this is a maintenance caveat, not abandonment by itself.
All recent repository commits came from one contributor, leaving maintenance dependent on a single person.
There was one commit in the last 3 months from one active maintainer, so the repository is not dormant but its recent pace is very low.
The repository uses TypeScript, Turbo, npm scripts, and esbuild, demonstrating an established build process; no security scanning tooling was detected, which is a modest transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@jridgewell/resolve-uri Version ^3.1.0 | — | — |
@jridgewell/sourcemap-codec Version ^1.4.14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.