Broccoli plugin for referring to source directories on the file system
58%
Total Score
67
100
89
67
50
No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable; this is a transparency gap rather than evidence of maliciousness.
A prepare script runs during installation or package preparation, adding execution behavior that warrants attention, although the signal provides no evidence that it is unsafe.
The package has 8 releases since 2015, but its latest release was in March 2021 and there were no releases in the last 12 months, indicating a prolonged maintenance gap.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing that current maintenance activity is dormant.
There were no new or closed issues or pull requests in the last month, while 4 issues and 11 pull requests remain open; this suggests limited recent project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
broccoli-node-api Version ^1.6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.