Binary wrapper that makes your programs seamlessly available as local dependencies
42%
Total Score
33
50
81
83
50
The package has 39 releases but none in the last seven years, leaving this release substantially stale and raising abandonment risk.
No commits or active maintainers were recorded in the last three months, supporting the concern that active maintenance has largely stopped.
No build attestation or trusted-publisher provenance is available, so consumers cannot verify how this release was produced; this is a transparency gap rather than evidence of harm.
Six runtime dependencies are a moderate footprint for a binary-wrapper library, creating some dependency maintenance exposure without indicating an excessive graph.
The repository is owned by an individual account rather than an organization, so there is no observed organizational backing to compensate for the thin recent maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pify Version ^4.0.1 | — | — |
download Version ^7.1.0 | — | — |
bin-check Version ^4.1.0 | — | — |
import-lazy Version ^3.1.0 | — | — |
os-filter-obj Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.