Package Health

@sinonjs/fake-timers

Strong documentation, built-in types, repository tests, and organization backing support dependable use. The release remains active, but recent source activity and workflow pinning leave meaningful maintenance and build-hygiene concerns.

Latest 15.4.0NPMNPM

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Lifecycle scriptscaution

A prepare install-time script is present, so installation performs extra package-defined work. This is a modest build-hygiene concern, not evidence of abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Frequent registry releases and a recent push partly offset this, but the recent source-activity gap remains significant.

Repo issue activitycaution

There were four new pull requests in the last month, but no issues or pull requests were closed or merged, which weakens evidence of recent maintenance throughput.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance and disclosure expectations unclear.

Workflow auditcaution

The workflow audit completed cleanly with read-only permissions and no dangerous findings, but all 16 action references are unpinned, leaving the build exposed to moving action revisions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
@sinonjs/commons
Version ^3.0.1
—
—

Weekly Downloads

Info

Last Published
5 months ago
Created
6 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform