Package Health

decamelize

Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow

Latest 7.0.0NPMNPM

82%

Total Score

healthy

Mature, actively maintained package with one-person maintenance and unpinned CI actions as the main concerns.

Are you affected? Scan for Free

Health Score Breakdown

Build provenancecaution

No build attestation or trusted-publisher identity was detected, leaving publication provenance less transparent even though the package has no runtime dependencies.

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated contributor activity is less easily transferable to another maintainer.

Repo bus factorcaution

All recent commits came from one contributor, with a 100% top-contributor share; because the repository owner is an individual, this leaves a thin maintenance base.

Repo commit activitycaution

There was one commit in the last 3 months from one active maintainer, showing recent activity but limited ongoing throughput.

Repo toolingcaution

The project uses TypeScript build tooling, but no security scanning tools were detected. For this small package that is a hygiene gap rather than a severe risk.

Vulnerabilities

TitleVersionsSeverity
CVE-2017-16023
decamelize is vulnerable to Uncontrolled Resource Consumption in versions 1.1.0 - 1.1.1.
1.1.0 - 1.1.1
High

Package versions

Maintainers

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
14 hours ago
Created
11 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform