A helper library to assist in localizing subprocesses spun up by VS Code extensions
78%
Total Score
83
100
88
90
The package has 16 releases, but none in the last 12 months and the latest registry release was about 2 years and 9 months ago. This is a meaningful freshness concern, though the linked repository was pushed recently.
Only one commit from one active maintainer was recorded in the last 3 months. This sparse activity is partly offset by the recent repository push and active pull-request activity, but it still raises maintenance-continuity concerns.
The CI workflow does not declare top-level token permissions. No write permissions were observed, but the omission is a minor workflow-hardening gap.
Version 0.0.18 is not a stable-major release, which suggests a less mature compatibility commitment. It is not marked prerelease, so this is a modest concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.