Package Health

@vercel/ncc

Simple CLI for compiling a Node.js module into a single file, together with all its dependencies, gcc-style.

Latest 0.45.0NPMNPM

86%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Health Score Breakdown

Repo commit activitycaution

Only two commits from two maintainers were recorded in the last three months, so development activity is modest. The recent release and organization backing partly compensate for that limited volume.

Workflow auditcaution

Both workflows were analyzed successfully, with no untrusted checkout or script-injection paths and scoped read-only or job-level permissions. Three of four action references are unpinned, and a high-confidence audit finding reports installation outside a lockfile; the low-confidence cache finding is only hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 month ago
Created
6 years ago
Unpacked Size
17.8 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform