Parse JavaScript one character at a time to look for snippets in Templates. This is not a validator, it's just designed to allow you to have sections of JavaScript delimited by brackets robustly.
63%
Total Score
67
100
90
83
The repository is owned by an individual rather than an organization, so the project appears to rely on a relatively narrow ownership base.
The latest registry release was in December 2021, with no releases in the following 12 months represented by the collected history. This is a meaningful sign of slowed maintenance for a dependency.
The repository had zero commits and zero active maintainers during the last three months, indicating limited recent maintenance capacity.
The project uses TypeScript and npm build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.
All three workflows were analyzed successfully and contain no untrusted checkouts, injection findings, or broad top-level write permissions. However, all 10 analyzed action references are unpinned, leaving workflow dependencies less reproducible.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.