Chromium Binary for Serverless Platforms
78%
Total Score
60
100
95
80
100
Only one registry account has publish access. That is a limited publishing base, though repository activity and provenance provide some compensating evidence that releases are actively managed.
The registry namespace and repository are owned by the same individual account, not an organization, so the single-maintainer and single-contributor risks are not compensated by visible organizational backing.
All two recent commits came from one contributor, creating a meaningful continuity risk for a user-owned project with no organizational backing shown.
Only two commits were made in the last three months by one active maintainer, showing current but light maintenance activity.
The repository uses established build and test tooling, including TypeScript and Vitest, but no security scanning tools were detected. The build and test tooling supports maintainability while the missing scanning warrants caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tar-fs Version ^3.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.