This is a healthy, actively maintained release with strong evidence of maturity and operational support: the package has existed for over 7 years, has 348 releases including 24 in the last 12 months, is not deprecated, is backed by an active organization-owned repository, and has current high-volume commit and pull-request activity. MIT licensing, included type declarations, repository tests and changelog, build provenance attestation, a security policy, and no detected dangerous workflow patterns further support safe adoption. The main concerns are that 94% of recent commits come from one contributor, repository security scanning is not configured, two workflows lack top-level token permissions, and the linked monorepo does not explicitly mention this package; these warrant routine dependency review but do not outweigh the strong maintenance evidence.
86%
Total Score
88
100
89
90
100
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@probe.gl/log Version ^4.1.1 | — | — |
@probe.gl/stats Version ^4.1.1 | — | — |
@loaders.gl/schema Version 4.5.1 | — | — |
@loaders.gl/worker-utils Version 4.5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.