find-pkg
Find the first directory with a package.json, recursing up, starting with the given directory. Similar to look-up but does not support globs and only searches for package.json. Async and sync.
55%
Total Score
50
100
88
75
Health Score Breakdown
Only one registry publishing account is listed, which creates a thin publishing base. The linked repository is also owned by an individual, so there is no provided organization backing to offset that concentration.
The package has had five releases since November 2015, but none in the last 12 months and the latest was published in March 2018, more than eight years ago. This materially increases the risk that future fixes will not arrive.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. The repository is still available, but observed maintenance capacity is weak.
The repository has no security policy. For a small utility this is a modest transparency gap, but it provides no documented route for reporting vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 find-file-up Version ^2.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 10 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.