Higher-order functions and common patterns for asynchronous code
78%
Total Score
50
100
94
67
The repository is owned by an individual rather than an organization, so the concentrated recent maintenance activity is not buffered by visible organizational backing.
The package has 94 releases and a long history, but it has had no registry release in about two years. Repository activity provides some compensation, so this is a moderate maintenance concern rather than abandonment evidence.
One contributor made 100% of the recent commits. The concentrated activity increases continuity risk, although the repository is established and unarchived.
Only two commits were recorded in the last three months, and activity is limited to one active maintainer. This is weaker than the repository's long history and creates a real maintenance concern.
No repository security policy was found. This is a transparency gap, but it is not by itself evidence that the package is unsafe to depend on.
| Title | Versions | Severity |
|---|---|---|
CVE-2021-43138 async is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 3.0.0 - 3.2.2 and 2.0.0 - 2.6.4. | 2.0.0 - 2.6.43.0.0 - 3.2.2 | High |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.