fetch-mock
Mock http requests made using fetch
82%
Total Score
70
100
95
67
50
Health Score Breakdown
No build attestation or trusted-publisher identity is reported, leaving the connection between source and published artifact less transparent.
Only one registry account has publish access. The long release history and active repository partly compensate, but publishing remains dependent on one account.
The repository is owned by an individual rather than an organization, so the concentrated contributor and single publishing account provide no organizational handoff buffer.
Two contributors are active, but one accounts for 10 of 11 recent commits, creating a concentrated maintenance burden.
The project uses TypeScript, npm scripts, and Rollup, but no security-scanning tooling is reported, leaving a modest security-hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 dequal Version ^2.0.3 | — | — |
regexparam Version ^3.0.0 | — | — |
glob-to-regexp Version ^0.4.1 | — | — |
@types/glob-to-regexp Version ^0.4.4 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 11 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.