Copy files && directories with webpack
24%
Total Score
50
88
75
The linked webpack/copy-webpack-plugin repository is marked archived, even though it was pushed recently; archival is a severe maintenance and abandonment risk for a dependency.
Two commits by two active maintainers in the last three months and the recent release show current activity, partially offsetting the archive status but not removing its maintenance risk.
All workflows use read-only permissions and the audit completed fully, but all 7 action references are unpinned and a high-confidence low-severity adhoc-packages finding shows a package installed outside a lockfile.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tinyglobby Version ^0.2.12 | — | — |
glob-parent Version ^6.0.1 | — | — |
schema-utils Version ^4.2.0 | — | — |
normalize-path Version ^3.0.0 | — | — |
serialize-javascript Version ^7.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.