sort module-deps output for deterministic browserify bundles
67%
Total Score
75
100
88
88
The package has 19 releases since July 2013, but version 2.0.1 was last released in October 2019 and has had no releases in the last 12 months. This materially raises maintenance and compatibility risk.
There were no commits and no active maintainers in the measured three-month window. The recent repository push is compensating evidence, but the absence of current commit activity still supports caution.
The repository reports no build tooling or security scanning. For this small, directly published JavaScript utility this is a transparency and maintenance gap, but not a severe risk by itself.
No repository security policy is present. This is a modest transparency gap, especially for a package with limited recent release activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
subarg Version ^1.0.0 | — | — |
through2 Version ^2.0.0 | — | — |
JSONStream Version ^1.0.3 | — | — |
shasum-object Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.