ECMAScript6 WeakMap polyfill
68%
Total Score
50
83
83
The repository is owned by an individual account rather than an organization, so there is no organizational succession signal. The repository and package identity still align through the owner and matching name.
The package has 13 releases since 2013, but its latest release was over 7 years ago and there were no releases in the last 12 months. This indicates a mature but inactive release line.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the old last push, this is evidence of stopped maintenance rather than merely a quiet release cadence.
The repository uses a build tool, but no security-scanning tool was detected. For this small package the missing scanner is a modest hygiene gap, not a severe risk.
The linked repository is not archived, although it was last pushed in 2021. Its unarchived status is positive, but the old push date supports the inactivity concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
d Version 1 | — | — |
es5-ext Version ^0.10.46 | — | — |
es6-symbol Version ^3.1.1 | — | — |
es6-iterator Version ^2.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.