A native C++ Node module for querying and subscribing to filesystem events. Used by Parcel 2.
67%
Total Score
100
90
50
The linked repository name differs from the platform package name and its README does not mention this package, so ownership of this platform-specific artifact is less transparent. The organization-backed repository provides some compensation but does not remove the documentation gap.
The linked repository has no security policy, leaving reporting and response expectations undocumented for a native binary package. This is a real transparency gap, though it does not indicate abandonment by itself.
All 21 analyzed action references are unpinned, and the workflow uses trusted publishing; both weaken build and release hygiene. The cache-poisoning findings have low confidence and therefore add little weight, while the audit itself is complete.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.