A treeshaken subset of JSTS functions for use within
63%
Total Score
75
100
89
75
50
No build attestation or trusted-publisher identity is present, which limits publication transparency, although this is not evidence of unsafe behavior by itself.
Only two releases exist over roughly five years, with no release in the last 12 months and a median gap of about three years, indicating limited maintenance cadence.
There were zero commits and zero active maintainers in the last three months, reinforcing the concern that maintenance has slowed substantially.
The repository has only one open issue and no issue or pull-request activity in the last month; this is consistent with a small stable project but provides little evidence of current responsiveness.
The repository uses Rollup, npm scripts, and Babel, but no security scanning tools are reported, leaving a modest security-process gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jsts Version 2.7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.