Dedupes node modules as they are being required which works even when dependencies are linked via ln -s or npm link.
43%
Total Score
33
100
79
100
The latest release was in November 2017, nearly nine years ago, and there were no releases in the last 12 months. This strongly indicates the package is no longer actively maintained.
The repository had no commits or active maintainers in the last three months, reinforcing the long release gap and indicating weak current maintenance capacity.
The registry lists one maintainer, and the repository is owned by an individual rather than an organization. That creates a thin support base if the project needs updates.
There were no new or closed issues or pull requests in the last month, while two issues and one pull request remain open. This suggests limited project responsiveness.
The repository has no build tool and no security scanning tooling. For a small package this is not severe, but it reduces evidence of maintained engineering and security practices.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
xtend Version ^4.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.