A high-level terminal interface library for node.js.
57%
Total Score
50
79
50
50
The latest release was over 10 years ago, with no releases in the last 12 months. Its 78 historical releases show past activity but do not offset the prolonged release gap.
No build provenance attestation or trusted-publisher information is present, leaving publication origin less transparent. This is a supply-chain hygiene gap rather than evidence that the release is malicious.
Only one registry maintainer, chjj, is listed. This creates a thin publishing base, though the linked repository is also owned by that same individual, so the identity is consistent.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating no recent maintenance capacity. A push in March 2024 shows the repository is not entirely abandoned, but activity remains very limited.
There were 205 open issues and 50 open pull requests, while the last month had no new issues or pull requests and only 1 closed issue. This suggests a substantial unresolved backlog and little current triage.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.