Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.
65%
Total Score
83
100
89
88
50
No build provenance attestation or trusted-publisher identity is present, leaving publication origin less verifiable; this is a transparency gap rather than evidence of maliciousness.
The package has 91 releases since 2013, but its latest release was about 2 years and 9 months ago and there were no releases in the last 12 months, indicating stalled maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign that ongoing development is currently quiet.
The package provides no type declarations. This is a consumer ergonomics gap for typed JavaScript or TypeScript projects, but it is not by itself an abandonment signal.
The sole workflow was fully analyzed and scopes permissions at job level, but all 6 action references are unpinned and the audit found a high-confidence bot-conditions issue; these weaken release-workflow hygiene without proving the package is unfit.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.