Package Health

decode-formdata

Decodes complex FormData into a JavaScript object

Latest 0.9.0NPMNPM

61%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

The package has 15 releases since October 2023, but none in the last 12 months and the latest release was about 18 months ago. This points to a meaningful maintenance slowdown.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the older last push, this is the strongest evidence of stalled maintenance.

Repo issue activitycaution

The repository has six open issues but no new or closed issues, pull requests, or merges in the last month. This is consistent with low current project activity.

Security policycaution

No security policy is present in the repository. This weakens the project's vulnerability-reporting transparency, though it does not by itself indicate unsafe code.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous audit findings and one workflow scopes permissions at job level. However, all six action references are unpinned, leaving avoidable workflow supply-chain exposure.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10183 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
decode-formdata is vulnerable to Prototype Pollution in versions 0.1.0 - 0.8.0.
0.1.0 - 0.8.0
Medium

Package versions

Maintainers

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 year ago
Created
3 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform