Mathematical expression evaluator fork with exports map, prototype pollution and code injection security fixes
67%
Total Score
caution
Usable with caveats: recent releases are offset by no commits in the last three months and a one-person maintainer base.
A prepublish lifecycle script adds release-process complexity and can affect publication behavior, although it is not an install script.
One registry maintainer creates a thin publishing base, increasing continuity risk; the individually owned repository provides no organizational backing to offset it.
The repository recorded zero commits and zero active maintainers in the last three months, indicating a recent pause in development despite the recent release history.
The project uses Rollup and npm scripts, but no security scanning tools were detected, leaving security-related maintenance less visible.
No repository security policy was found, so vulnerability reporting and response expectations are not documented.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.