Number parsing utility
62%
Total Score
caution
Usable with caveats: no releases in nearly two years and no recent repository commits.
The repository is owned by a user account rather than an organization, so the single registry maintainer is not explained by organization-backed publishing; this leaves a relatively thin visible ownership structure.
The package has 11 releases over about five years, but none in the last 12 months and the latest release was nearly two years ago, indicating slowed maintenance.
There were zero commits and zero active maintainers in the last three months, reinforcing the concern that active maintenance has stalled.
The repository name does not match the package and its README does not mention the package. While a monorepo subpackage can legitimately have a different name, the absence of both links warrants caution about source-package alignment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@xtuc/long Version 4.2.2 | — | — |
@webassemblyjs/helper-api-error Version 1.14.1 | — | — |
@webassemblyjs/floating-point-hex-parser Version 1.14.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.