Various JavaScript/TypeScript utilities of wide relevance to the MetaMask codebase
91%
Total Score
100
50
100
75
100
The package has 12 runtime dependencies and 36 development dependencies, a nontrivial dependency surface for a utility library but not by itself evidence of poor health.
A prepack lifecycle script runs during packaging, adding build-chain complexity and a point to review, although it is not an install-time postinstall script.
Seven of nine workflows lack top-level permissions declarations, and one workflow declares top-level write permissions; although six use job-level permissions and one is read-only, the incomplete least-privilege declarations merit review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
uuid Version ^9.0.1 | — | — |
debug Version ^4.3.4 | — | — |
lodash Version ^4.17.21 | — | — |
semver Version ^7.6.3 | — | — |
pony-cause Version ^2.1.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.