HTML5 `FormData` for Browsers and Node.
64%
Total Score
50
100
89
83
50
No build attestation or staged-publishing provenance is present, leaving publication origin less transparent. This is a moderate transparency gap rather than evidence that the release is unsafe.
Only one registry publishing account is listed, which is a thin publishing base. The linked repository and its documented project structure provide some compensating continuity, but not a broad release capacity.
The package has 45 releases and a historically regular median interval of about 10 days, but it has had no registry release in roughly four years. That long pause lowers confidence in ongoing maintenance.
The repository had no commits and no active maintainers in the measured three-month period, consistent with the long release pause and lowering confidence in current maintenance.
There were no new or closed issues or pull requests in the measured month, with two open issues and two open pull requests. This indicates limited recent project activity but not abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fetch-blob Version ^3.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.