Type utilties for creating nominal/branded types in TypeScript
78%
Total Score
healthy
Healthy: strong organizational maintenance and publishing evidence outweigh workflow and package-link caveats.
The package has 847 releases, including 589 in the last 12 months, with a median interval of about 41 minutes. This shows active delivery, though the unusually rapid cadence warrants some caution about release churn.
The linked repository name does not match the package and its README does not mention @solana/nominal-types, so the package-to-repository relationship is not clearly demonstrated. This is a caution even though a monorepo can legitimately contain differently named packages.
Version 8.4.0 is a stable major and not a prerelease, but 90% of recent versions are prereleases, indicating a development stream that may change frequently.
All 13 workflows were analyzed, but one pull_request_target workflow performs an untrusted checkout, and seven workflows grant top-level write permissions. The paths do not show that these risks combine in one workflow, so this is a meaningful hygiene caution rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.