Airbnb's base JS ESLint config, following our styleguide
58%
Total Score
63
100
81
75
50
The package has 46 releases and a historically regular median interval of about 12 days, but no releases in nearly five years. That long release silence materially raises abandonment and compatibility risk.
The repository recorded zero commits and zero active maintainers over the past three months. Even with a recent repository push elsewhere in the data, this indicates weak current development activity.
No build attestation or trusted-publisher provenance is reported. This weakens release transparency, though it is a supply-chain assurance gap rather than evidence that the package is unsafe.
A prepublish lifecycle script is present. This is a mild build-transparency concern because publishing behavior is involved, but the signal alone does not show harmful installation-time execution.
The repository still has pull request activity, but it closed only two issues and merged no pull requests in the past month. This suggests limited current maintenance momentum.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
semver Version ^6.3.0 | — | — |
object.assign Version ^4.1.2 | — | — |
object.entries Version ^1.1.5 | — | — |
confusing-browser-globals Version ^1.0.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.