Tokenized zip support
78%
Total Score
healthy
Recent release activity and a maintained repository support adoption, but 9 of 10 workflow actions are unpinned.
The release has no build attestation or trusted-publisher provenance, limiting verification of how the artifact was produced.
The repository is owned by an individual account rather than an organization, so the project has less institutional backing; recent release and pull-request activity partly offsets that concern.
The repository has 0 stars, 0 forks, and 1 watcher. This offers little community validation, but popularity is supporting evidence rather than a standalone health verdict.
No repository security policy was found, leaving vulnerability reporting and response guidance less transparent.
Version 0.5.0 is not a prerelease, although it remains before a stable 1.0 major release; this is a modest maturity limitation rather than a serious risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
debug Version ^4.4.3 | — | — |
token-types Version ^6.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.