A blazing fast deep object copier
88%
Total Score
healthy
Frequent releases and recent commits support the package, but most recent work comes from one contributor and no security policy is published.
No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable despite the otherwise complete package and repository evidence.
Two contributors are active, but one accounts for 8 of 9 recent commits, so maintenance is concentrated and somewhat vulnerable to one person becoming unavailable.
The project uses TypeScript, Rollup, Vite, and npm scripts for builds, but no security-scanning tools were detected; the established build tooling is a positive while scanning coverage remains limited.
The repository has no published security policy, reducing transparency about vulnerability reporting and response.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-448660 fast-copy is vulnerable to Uncontrolled Recursion in versions 0.0.1 - 2.1.7, 3.0.0 - 3.0.2 and 4.0.0 - 4.0.4. | 0.0.1 - 2.1.73.0.0 - 3.0.24.0.0 - 4.0.4 | Low |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.