Package Health

@protobufjs/eventemitter

A minimal event emitter.

Latest 1.1.1NPMNPM

78%

Total Score

healthy

Healthy, supported by active maintenance and strong package hygiene despite workflow pinning and repository-identity caveats.

Health Score Breakdown

Repo package mentioncaution

The repository name does not match this scoped package and its README does not mention the package, so the package-to-repository relationship is less transparent. The mismatch may be normal for a monorepo subpackage, but the absence of a README mention still warrants caution.

Repo toolingcaution

The repository uses TypeScript, npm scripts, and Gulp, but no security-scanning tools were detected. This is a modest maintenance-hygiene gap rather than evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed without failures, and no untrusted checkout or script injection was found. However, all 12 action references are unpinned, and both workflows install packages outside a lockfile; these are concrete reproducibility and workflow-hygiene concerns, while the low-confidence cache finding is not independently decisive.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
4 months ago
Created
9 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform