CSS box-shadow parser and stringifier
48%
Total Score
100
75
100
50
The package was first released nearly nine years ago, but has had no releases in the last 12 months and only four releases overall; this raises abandonment risk.
No build attestation or trusted publisher information was recorded, leaving publication provenance less verifiable; this is a transparency concern alongside the stale release history.
The latest version is a prerelease despite a stable major version, and all recent releases were prereleases, reducing confidence in release maturity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.