Run scripts that set and use environment variables across platforms
22%
Total Score
50
100
83
67
50
The linked repository is archived even though it was pushed on November 16, 2025; archival removes confidence that future defects will receive maintenance.
No build provenance attestation or trusted publisher is present, reducing release transparency; the reproducible-looking source tree provides only partial compensation.
A single registry maintainer is consistent with the user-owned repository backing, but it leaves limited publishing redundancy.
There were zero commits and zero active maintainers in the last three months, consistent with the project's completed status but still providing no evidence of ongoing maintenance.
There was no new issue or pull-request activity in the last month and only one open issue, indicating little active development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cross-spawn Version ^7.0.6 | — | — |
@epic-web/invariant Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.