Extended glob support for JavaScript. Adds (almost) the expressive power of regular expressions to glob patterns.
58%
Total Score
50
50
75
100
50
The package has 12 releases since 2015, but none in the last 12 months and the latest release was over eight years ago. This strongly suggests maintenance has stopped, although the long history provides some maturity evidence.
There were zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This is the main abandonment concern, despite the repository remaining available.
No build attestation or trusted-publisher provenance was provided, leaving the path from source to published artifact less transparent. The coherent repository and package file layout provide some compensating traceability but not verified provenance.
Eight runtime dependencies make this a moderately dependency-heavy small library, increasing reliance on its dependency chain. No provided signal shows that this dependency profile is currently causing instability.
There were no new or closed issues or pull requests in the last month, with only three open issues and one open pull request. This indicates little current project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
to-regex Version ^3.0.1 | — | — |
regex-not Version ^1.0.0 | — | — |
snapdragon Version ^0.12.0 | — | — |
array-unique Version ^0.3.2 | — | — |
fragment-cache Version ^0.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.