Publish multiple editions for your JavaScript packages consistently and easily (e.g. source edition, esnext edition, es2015 edition)
68%
Total Score
83
100
94
83
The package is mature, with 134 releases since February 2016, but it has had no releases in the last 12 months and its latest release was about 13 months ago, indicating a slower current cadence.
No commits or active maintainers were recorded in the last 3 months, a meaningful maintenance concern, although the repository's recent push status provides limited compensating evidence.
All 9 analyzed action references are unpinned, and a high-confidence bot-conditions finding reports potentially spoofable actor context. The workflow audit was complete and found no untrusted checkout, script injection, or broad top-level write permissions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
version-range Version ^4.15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.