This release presents a strong supply-chain health profile. It has a substantial and recent release history, stable versioning, no registry deprecation, an active unarchived organization-backed repository, current commit and pull-request activity from six contributors, build provenance, documented security policy, security scanning, type declarations, licensing, and comprehensive source scaffolding. The main residual concern is workflow permission hygiene: all seven analyzed workflows lack top-level permissions declarations, although none declares top-level write access and no untrusted checkout or script injection was detected. The package is therefore a healthy dependency with a modest CI hardening gap.
91%
Total Score
100
100
100
90
100
All seven workflows lack top-level permissions declarations, which is a CI hardening gap; however, none declares top-level write access and two specify job-level permissions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramda Version ~0.30.0 | — | — |
ts-mixer Version ^6.0.4 | — | — |
@types/ramda Version ~0.30.0 | — | — |
ramda-adjunct Version ^5.0.0 | — | — |
@babel/runtime-corejs3 Version ^7.26.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.