Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
68%
Total Score
63
100
94
88
A single registry maintainer is a thin publishing base, but the linked repository is owned by the same individual and the package has a long history, partly compensating for the bus-factor concern.
The repository is owned by an individual rather than an organization, so there is no broader organizational backing to offset the single-maintainer risk.
The package has 10 releases since January 2015 but none in the last three years, indicating a long release pause. Its mature age and stable latest version partly offset the maintenance concern.
There were no commits and no active maintainers in the last three months, a concrete sign of currently paused development. The recent repository push partly compensates but does not restore active cadence.
All five workflows were analyzed with no audit findings and no untrusted checkouts or script injections. However, all five action references are unpinned, so builds depend on moving action revisions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
object-keys Version ^1.1.1 | — | — |
define-data-property Version ^1.0.1 | — | — |
has-property-descriptors Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.