Incremental parser
78%
Total Score
healthy
Nine releases in the last 12 months and a roughly 20-day release interval show active maintenance.
No build attestation or trusted publisher identity is present, so consumers cannot independently verify how the published artifact was produced. The otherwise coherent artifact and active release history partly reduce, but do not remove, this transparency gap.
The package runs a prepare script during installation or package preparation. This adds install-time execution and some supply-chain and reproducibility risk, even though no maliciousness judgment is made here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@lezer/common Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.