Simple module to infer the root directory of the currently running node application
43%
Total Score
33
67
83
50
Only three releases exist, with the latest in May 2015 and none in roughly 11 years. This strongly raises abandonment risk despite the package's long history.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
No build attestation or trusted-publisher provenance is present. This weakens publication transparency, but it is secondary to the project's long inactivity.
One registry maintainer is a thin publishing base for a user-owned project, increasing continuity risk when there is no recent development activity.
There is one open issue and no issue or pull-request activity in the past month; this is limited evidence, but it does not offset the absence of recent commits.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.