Structural equality checking for JavaScript values
60%
Total Score
caution
Usable with caveats: no release since October 2023 leaves maintenance uncertain.
No build attestation or trusted-publisher provenance is present, reducing publication transparency; this is a moderate hygiene gap rather than evidence of abandonment.
A prepare script runs during installation, adding build or install-time behavior that deserves attention, although this signal alone does not indicate an unsafe dependency.
Only one registry publishing account is listed. Because the repository owner is also a user rather than an organization, the project has limited apparent publishing and maintenance redundancy.
The repository is owned by an individual account rather than an organization, providing no evidence of organizational backing to offset the thin maintainer base.
The package has 27 releases since June 2019, but none in nearly three years; the long gap is a meaningful maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.