A minimal event emitter.
78%
Total Score
healthy
Healthy, supported by active maintenance and strong package hygiene despite workflow pinning and repository-identity caveats.
The repository name does not match this scoped package and its README does not mention the package, so the package-to-repository relationship is less transparent. The mismatch may be normal for a monorepo subpackage, but the absence of a README mention still warrants caution.
The repository uses TypeScript, npm scripts, and Gulp, but no security-scanning tools were detected. This is a modest maintenance-hygiene gap rather than evidence of abandonment.
Both workflows were analyzed without failures, and no untrusted checkout or script injection was found. However, all 12 action references are unpinned, and both workflows install packages outside a lockfile; these are concrete reproducibility and workflow-hygiene concerns, while the low-confidence cache finding is not independently decisive.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.