Parses OpenAPI documents
68%
Total Score
67
50
94
50
The package declares 16 runtime dependencies for an OpenAPI server framework. This is a meaningful dependency surface, though not inherently excessive for the functionality described.
The package runs a prepare lifecycle script during installation or packaging. This adds execution during the dependency lifecycle, but the signal alone does not show harmful behavior.
The package has 67 releases over more than eight years, but none in the last 12 months; the latest release was about 19 months ago. This indicates a substantial recent slowdown, although the long release history shows prior maturity.
There were zero commits and zero active maintainers during the last three months. This is direct evidence of currently inactive development and raises abandonment risk.
The repository has 24 open issues and 12 open pull requests, but no new or closed issues and no merged pull requests in the last month. The backlog and lack of recent movement suggest limited current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
qs Version ^6.6.0 | — | — |
ajv Version ^8.3.0 | — | — |
glob Version ^10.3.10 | — | — |
lodash Version ^4.17.11 | — | — |
semver Version ^7.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.