Docker Remote API module.
70%
Total Score
60
100
90
67
Only one registry account has publish access. That is a modest publishing bus-factor concern, although repository activity shows the same maintainer is still active.
The repository is owned by an individual rather than an organization, so the concentrated recent activity and single registry maintainer provide no visible organizational handoff buffer.
One contributor made all commits in the last three months, leaving maintenance highly concentrated and increasing abandonment or handoff risk.
Only one commit was recorded in the last three months, with one active maintainer; this is a notable recent slowdown despite the latest release and pull-request activity.
No build tools or security scanning tools were detected. The repository still has tests, but the missing automated security tooling is a modest transparency and hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tar-fs Version ^2.1.4 | — | — |
protobufjs Version ^7.3.2 | — | — |
docker-modem Version ^5.0.7 | — | — |
@grpc/grpc-js Version ^1.11.1 | — | — |
@grpc/proto-loader Version ^0.7.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.