57%
Total Score
63
83
67
The package has a substantial history with 129 releases, but no releases in the last 12 months despite a median interval of about 5 days, indicating a meaningful recent slowdown.
All recent commits came from one contributor, concentrating short-term maintenance; organization ownership provides some ability to hand work off but does not replace observed activity.
Only one commit was recorded in the last three months, which is weak evidence of current maintenance for a package with a historically active release cadence.
The repository is receiving new issues and pull requests, but none of 46 open pull requests were merged in the last month, suggesting limited follow-through.
The repository name does not match the package and its README does not mention the package, creating some uncertainty about package-to-repository alignment even though a monorepo can explain a name mismatch.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
serve-static Version ^1.13.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.