Fastest Levenshtein distance implementation in JS.
68%
Total Score
50
100
93
75
50
No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable. This is a transparency caution, not evidence that the package is malicious.
The package uses a prepare install-time script. This deserves review because it can run during installation, but the provided signal does not show a dangerous command or make it a severe health risk on its own.
The package has 17 releases since July 2020, but its latest registry release was in August 2022 and there were no releases in the last 12 months. This is a meaningful maintenance concern, though the stable utility scope may require few updates.
The repository recorded no commits and no active maintainers in the last three months, indicating that maintenance has effectively paused. The repository is not archived, which is a limited compensating signal but does not restore current activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.