tiny modular DOM lib for ie9+
68%
Total Score
67
100
89
75
50
No build provenance attestation or trusted-publisher identity was detected. This limits publication transparency, although it is not evidence that the release is unsafe by itself.
The project has 40 releases over roughly 11.5 years, but none in the past 12 months; its latest release was about 15 months ago. This is a meaningful maintenance slowdown despite the historically regular release interval.
The repository recorded zero commits and zero active maintainers in the past three months. This is the strongest abandonment concern in the collected evidence, even though the repository is not archived.
There were no new or closed issues in the past month, while 18 issues and 18 pull requests remain open; four pull requests were opened but none merged. This suggests limited visible issue resolution.
The repository uses TypeScript, Babel, webpack, and npm scripts, showing an established build process. No security scanning tools were detected, which is a modest transparency and hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
csstype Version ^3.1.3 | — | — |
@babel/runtime Version ^7.27.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.