Modern JavaScript date utility library for jalali calendar
60%
Total Score
75
89
83
50
The release has no build provenance attestation or trusted-publisher configuration, reducing transparency about how the artifact was produced.
The repository has no commits and no active maintainers in the last three months, a meaningful sign of currently stalled development.
The project uses established build and test tools, but no security scanning tools were detected, leaving a security-process gap.
Version 4.4.0-0 is a prerelease, and all recent releases are prereleases, which increases compatibility uncertainty for consumers.
All 7 workflows were analyzed with no reported dangerous sinks or audit findings, but all 14 action references are unpinned, weakening reproducibility and update safety.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.