@nodelib/fs.scandir
Clear licensing, types, documentation, and a small dependency set reduce adoption friction. Pin this version and monitor the project, since its release and recent commit activity have both gone quiet.
68%
Total Score
75
100
94
75
Health Score Breakdown
The package has a mature history with 19 releases since May 2018, but its latest release was in December 2024 and there were no releases in the last 12 months. That slower cadence lowers confidence in ongoing maintenance.
There were no commits and no active maintainers in the three months before collection. Although the repository was pushed more recently, the measured commit window still indicates limited current development activity.
The repository has no security policy. This is a transparency gap, but it is a smaller concern because CodeQL scanning is present.
All 8 analyzed action references are unpinned, which weakens workflow reproducibility. The two reported cache-poisoning findings have low confidence and therefore remain hygiene concerns rather than severe evidence; the audit itself completed fully.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 run-parallel Version ^1.2.0 | — | — |
@nodelib/fs.stat Version 4.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 8 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.