Runs typescript type checker and linter on separate process.
68%
Total Score
67
93
50
50
No build attestation or trusted-publisher provenance is present. This limits publication transparency, but it is a supply-chain hygiene gap rather than evidence that the release is unfit on its own.
The package runs a prepare lifecycle script during installation. This is an additional install-time behavior to account for, but the signal alone does not show that it is unsafe or unusually complex.
The package has 225 releases over roughly nine years, but none in the latest 12 months and its latest release was in April 2025. That recent pause lowers confidence in ongoing maintenance despite the strong historical cadence.
The repository recorded zero commits and zero active maintainers in the latest three months. This is a meaningful maintenance warning, although the repository was pushed more recently and the project has a long release history.
There were no new or closed issues in the latest month and no merged pull requests, with one new pull request. This supports the picture of currently limited activity, though open issues and pull requests show the project is not abandoned outright.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
chalk Version ^4.1.2 | — | — |
memfs Version ^3.4.1 | — | — |
semver Version ^7.3.5 | — | — |
tapable Version ^2.2.1 | — | — |
chokidar Version ^4.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.