@peculiar/asn1-schema
Four active contributors and 24 recent commits support continued maintenance, though one contributor made 88% of them and the repository has no security policy. The package is licensed, typed, tested in source, provenance-attested, and actively released.
78%
Total Score
88
100
94
67
100
Health Score Breakdown
One contributor made 21 of 24 recent commits, creating concentration risk; the organization backing and three additional active contributors partly reduce the abandonment concern.
The project uses TypeScript, Vitest, and npm build scripts, but no security scanning tools were detected; this is a modest security-process gap rather than an abandonment signal.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.
Both workflows were analyzed successfully and had no untrusted checkout or script-injection findings, but all 9 action references are unpinned and the release workflow has three high-confidence template-injection findings; these are workflow hygiene risks, not evidence of an unfit package on their own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.8.1 | — | — |
asn1js Version ^3.0.10 | — | — |
@peculiar/utils Version ^2.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 7 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.