TypeScript definitions for event-source-polyfill
78%
Total Score
100
88
83
The package has 6 releases, but none in the last 12 months and its latest release was nearly three years ago. Active maintenance in the linked project partly offsets the age of this stable type-definition package.
The linked monorepo neither matches the package name nor mentions it in its README, which creates some uncertainty about direct repository ownership; the package README nevertheless identifies its DefinitelyTyped source path.
All 7 workflows were analyzed, all 25 action references are pinned, and no untrusted checkouts or script injections were found. Four medium-confidence template-injection findings remain as workflow hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.