Package Health

@types/mkdirp

Stub TypeScript definitions entry for mkdirp, which provides its own types definitions

Latest 2.0.0NPMNPM

15%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

60

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

The entire package is marked deprecated, with npm explicitly stating that mkdirp now provides its own type definitions. This is a severe adoption risk for a new dependency.

Build provenancecaution

No build attestation or trusted publisher information is available. This limits provenance verification, though the package's tiny, inspectable artifact reduces the practical significance of the gap.

Dependency profilecaution

The package declares one runtime dependency, mkdirp. That dependency is not inherently excessive, but it adds no compensating value to a package whose type definitions are no longer needed.

Release historycaution

The package has 18 releases since 2016, but its latest release was over three years ago and it had no releases in the last 12 months. This is consistent with a retired package and reinforces the deprecation status.

Type declarationscaution

The package contains no type declarations despite being an @types package. The README explains that this is intentional because mkdirp now provides its own definitions, but it confirms that this release offers no typing value.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
mkdirp
Version *
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
10 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform