@manypkg/get-packages

> A simple utility to get the packages from a monorepo, whether they're using Yarn, npm, Lerna, pnpm, Bun or Rush

Latest 3.1.0

64%

Total Score

caution

Usable with caveats: no registry releases in the last 12 months and no commits in the last 3 months weaken maintenance confidence.

Health Score Breakdown

Build provenance

No build attestation or trusted-publisher provenance was reported. This limits publication transparency, though it is not by itself evidence that the release is unsafe.

Release history

The package has 13 releases over about 6 years, but none in the last 12 months and its latest registry release was about 14 months ago. This is a meaningful maintenance concern, although the repository was pushed more recently.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. That weakens evidence of ongoing maintenance despite the repository not being archived.

Repo package mention

The repository name does not match the package and its README does not mention @manypkg/get-packages. This may reflect a monorepo, but the collected evidence does not explicitly connect this package to that repository.

Security policy

No SECURITY.md or equivalent security policy was found. This is a transparency gap for reporting and handling vulnerabilities.