fast-glob
It's a very fast and efficient glob library for Node.js
82%
Total Score
70
100
94
80
50
Health Score Breakdown
No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent than a verified release, but this is not by itself evidence that the package is unsafe.
Only one registry account has publish access, which limits publishing redundancy, though repository activity shows two active contributors and does not indicate abandonment.
The repository is owned by an individual rather than an organization, so there is no organizational handoff or backing signal; active contributors and repository activity provide partial compensation.
The package has existed since 2016 with 44 releases, but it had no registry release in the last 12 months. Recent repository activity and a current release note partly compensate, making this a maintenance caveat rather than abandonment evidence.
Two contributors were active in the last three months, with the leading contributor responsible for two of three commits. Activity is somewhat concentrated but has meaningful secondary participation.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 merge2 Version ^1.3.0 | — | — |
micromatch Version ^4.0.8 | — | — |
glob-parent Version ^5.1.2 | — | — |
@nodelib/fs.stat Version ^2.0.2 | — | — |
@nodelib/fs.walk Version ^1.2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.