Find package.json files in parent directories, keep finding until you find the right one using iterators.
52%
Total Score
33
100
79
50
The package has made no release in more than 7 years, with only 3 releases overall and none in the last 12 months. This is a substantial maintenance concern, though the small, stable package may need few changes.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. The repository remains available, but there is little evidence of ongoing maintenance.
Only one registry account has publish access, leaving a thin publishing base. The linked repository is owned by the same individual, which provides some continuity but not much redundancy.
There has been no issue or pull-request activity in the last month, with one open issue and one open pull request. This supports the broader picture of limited current project activity.
The repository reports no build tooling and no security scanning tools. For a small dependency-free package this is a modest transparency and maintenance gap, not a severe risk by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.