Real native events for cypress. Dispatched via CDP.
72%
Total Score
60
100
94
80
100
Only one registry account has publish access. This is a genuine publishing continuity concern, although repository activity and provenance provide some compensating transparency.
The repository is owned by an individual user, so the concentrated contributor and single-publisher risks are not offset by organization-level maintenance capacity.
The package has existed for about 5 years and has 26 releases, but only 1 release in the last 12 months; the latest release is current, so this indicates slower maintenance rather than abandonment.
All recent commits came from one contributor, creating a concentrated maintenance dependency; the repository owner is an individual rather than an organization, so there is no project-backing compensation.
Only 1 commit from 1 active maintainer occurred in the last 3 months, which is thin evidence of sustained maintenance and lowers confidence in response capacity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.