Package Health

crypto-js

JavaScript library of crypto standards.

Latest 4.2.0NPMNPM

15%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecationdanger

The registry marks the entire package as deprecated and explicitly says active development and maintenance have been discontinued; no replacement is provided.

Release historydanger

The latest release was nearly three years ago, with no releases in the last 12 months, confirming that the project is no longer receiving release maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.

Repo issue activitycaution

There were no new or closed issues in the last month and no merged pull requests, while 259 issues remain open; this is consistent with an inactive project.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-554041
crypto-js is vulnerable to Insecure Randomness in versions 3.1.2 - 3.1.8 and 3.3.0 - 3.3.0.
3.1.2 - 3.1.83.3.0 - 3.3.0
Critical
CVE-2023-46233
crypto-js is vulnerable to Use of a Broken or Risky Cryptographic Algorithm in versions 0.0.0 - 4.2.0.
0.0.0 - 4.2.0
Critical
CVE-2020-36732
crypto-js is vulnerable to Use of Insufficiently Random Values in versions 3.2.0 - 3.2.0.
3.2.0 - 3.2.0
Medium

Package versions

Maintainers

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
2 years ago
Created
13 years ago
Unpacked Size
0.5 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform