TypeScript definitions for chance
88%
Total Score
100
94
90
50
No build attestation or trusted-publisher provenance is reported, leaving publication origin less transparent than an attested release.
The package has existed for over 10 years with 38 releases and a recent release, though only one release occurred in the last 12 months, indicating a slower cadence.
Five workflows declare read-only permissions and none declare top-level write permissions; two omit top-level permissions, a minor transparency gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.