CSV and object generation implementing the Node.js `stream.Readable` API
88%
Total Score
healthy
Healthy: active organization-backed maintenance and strong package hygiene outweigh workflow and security-policy gaps.
One contributor made about 74% of the 19 recent commits, creating concentration risk. However, five additional contributors were active during the same period, partly compensating for that concentration.
The project uses npm scripts and TypeScript for builds, but no security-scanning tools were detected. This is a modest process gap rather than evidence of abandonment.
The linked repository has no SECURITY.md or other detected security policy, reducing transparency about vulnerability reporting and response.
The single workflow analyzed successfully and has no untrusted checkout, injection, or auditor findings. However, it grants top-level write permissions and all five action references are unpinned, which weakens workflow hardening.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.