Find the position of grapheme cluster breaks in a string
72%
Total Score
caution
Usable with caveats: recent releases support it, but install-time build steps limit confidence in the published artifact.
No build attestation or trusted-publisher provenance is present, so consumers cannot independently verify how the published artifact was produced.
A prepare script runs during installation, adding build-time behavior and some supply-chain exposure compared with a package that ships only ready-to-use files.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.