This is a healthy, mature release with strong evidence of active maintenance and organizational backing. The package has existed for over 7 years, has 757 releases including 68 in the last 12 months, is not deprecated, is backed by the Microsoft organization, and its repository was updated recently. Licensing, type declarations, repository tests, build tooling, security scanning, and a security policy are all present, while install-time scripts and dangerous workflow patterns are absent. The main residual concerns are that the release lacks build provenance attestation, commit activity is concentrated in one contributor despite three active contributors, and several workflows use top-level write permissions; these warrant normal supply-chain review but do not materially undermine the package's overall health.
91%
Total Score
90
100
100
90
50
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@nevware21/ts-async Version >= 0.5.5 < 0.6.0 | — | — |
@nevware21/ts-utils Version >= 0.14.0 < 2.x | — | — |
@microsoft/dynamicproto-js Version ^2.0.3 | — | — |
@microsoft/applicationinsights-shims Version 3.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.