A native C++ Node module for querying and subscribing to filesystem events. Used by Parcel 2.
72%
Total Score
caution
Usable with caveats: every GitHub Action is unpinned and publishing relies on a long-lived registry token.
No build attestation or trusted-publisher identity is present, reducing publication transparency for a native binary package.
The repository has ongoing issue and pull-request activity, though two new issues and no closed issues in the last month indicate limited recent resolution evidence.
The repository name does not match this platform package and its README does not mention the package explicitly, creating some uncertainty about package-to-repository ownership; the linked repository is nevertheless the stated watcher project.
The project uses established build tools, but no security scanning tools were detected, leaving a maintenance and release-hygiene gap.
No repository security policy was found, so users have no documented reporting or response process visible in the collected evidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.