Get the content charset from header and html content-type.
58%
Total Score
50
100
70
88
50
The package has five releases over roughly 14 years, with no releases in the last 9 years. That strongly lowers confidence in ongoing maintenance, though a stable utility may require few changes.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the last 2017 release, this indicates long-term inactivity.
No build attestation, trusted publisher, or staged publishing is reported. This limits release transparency, although the package is a simple artifact with no build step indicated.
Only one registry account has publish access. The repository is organization-owned, which provides some backing, but the registry publishing base remains narrow.
There are three open issues and no issue or pull-request activity in the last month, offering no evidence of active support.
| Title | Versions | Severity |
|---|---|---|
CVE-2017-16098 charset is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 1.0.1. | 0.0.0 - 1.0.1 | High |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.