Live CSS Reload & Browser Syncing
64%
Total Score
75
50
88
67
50
No build attestation or trusted-publisher provenance is available, leaving the relationship between source and published artifact less independently verifiable.
Twenty-eight runtime dependencies create a relatively broad maintenance surface for a development server and browser-sync tool, though the package is mature and established.
The project has a long history and 304 releases, but it has made no registry release in the last 12 months, which points to slowing maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign that ongoing maintenance has slowed.
The repository has 545 open issues, with two new issues and no closures in the last month, indicating a substantial unresolved maintenance backlog.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rx Version 4.1.0 | — | — |
opn Version 5.3.0 | — | — |
etag Version ^1.8.1 | — | — |
send Version ^0.19.0 | — | — |
chalk Version 4.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.