@sinonjs/commons
Simple functions shared among the sinon end user libraries
57%
Total Score
caution
Usable with caveats: no release activity for more than two years and this is a prerelease.
Health Score Breakdown
A prepare script runs during installation or package preparation. This is a modest supply-chain consideration, but the signal does not show what the script executes or indicate malicious behavior.
The package has 25 releases since 2018, but none in the last 12 months and the latest release was more than two years ago, which raises maintenance and abandonment concerns.
There were no commits and no active maintainers in the last three months, reinforcing the concern raised by the absent recent releases.
The repository uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a security-maintenance gap.
The repository has no security policy, reducing transparency about how vulnerability reports are handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 type-detect Version 4.0.8 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 8 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.