Find a file fast, by starting at the given cwd and recursing up one directory until the file is found or we run out of directories.
52%
Total Score
25
100
75
75
The latest release was published over 8 years ago, with no releases in the last 12 months. That long period without updates is a meaningful maintenance and compatibility concern despite the package having nine historical releases.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release hiatus. This strongly suggests the project is dormant rather than actively maintained.
Only one registry publishing account is listed, leaving little visible redundancy if the maintainer becomes unavailable. The repository is user-owned, so this is a real bus-factor concern rather than normal organization publishing hygiene.
The repository uses a build tool but reports no security-scanning tooling. That weakens ongoing security hygiene, particularly because the project has not been actively maintained for over 8 years.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, although the small and dormant project scope limits how much it changes the overall assessment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
resolve-dir Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.