62%
Total Score
63
100
95
67
50
There were zero commits and zero active maintainers in the last three months, a significant maintenance warning despite the recent registry release history and recent repository push.
The release has no build attestation or trusted-publisher provenance, leaving publication origin less independently verifiable than it could be.
Issues and pull requests remain active, but no pull requests were merged in the last month and the repository has a large open queue, suggesting limited recent throughput.
No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.
No type declarations are published. This is a consumer-ergonomics gap for typed JavaScript consumers, but it does not by itself indicate maintenance or abandonment risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
globals Version ^13.24.0 | — | — |
nullthrows Version ^1.1.1 | — | — |
@parcel/rust Version 2.16.4 | — | — |
@parcel/types Version 2.16.4 | — | — |
@parcel/utils Version 2.16.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.