Define a data property on an object. Will fall back to assignment in an engine without descriptors.
72%
Total Score
50
100
94
88
50
No build attestation or trusted publisher is present, leaving publication origin less verifiable; this is a transparency gap rather than evidence of unsafe code.
The repository is owned by an individual rather than an organization, so the single-publisher model provides limited visible organizational redundancy.
There have been seven releases since September 2023, but none in the last 12 months and the latest was February 2024, indicating a long release gap.
The repository recorded zero commits and zero active maintainers in the last three months, limiting evidence of ongoing maintenance capacity.
All five workflows were analyzed with no audit findings and no untrusted checkout or script-injection sinks, but all five action references are unpinned, weakening workflow supply-chain reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gopd Version ^1.0.1 | — | — |
es-errors Version ^1.3.0 | — | — |
es-define-property Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.