Backs out file tree changes
60%
Total Score
50
50
89
75
Five runtime dependencies create a meaningful maintenance and transitive-dependency surface for a small utility, though the profile is not unusually large.
A prepublish lifecycle script adds install or publication complexity and warrants some caution, although this signal alone does not indicate an unsafe package.
The package has 26 releases since September 2015, but none in about 7 years; the long release gap raises abandonment and compatibility concerns.
There were no commits or active maintainers in the last 3 months, reinforcing the concern raised by the package's long release gap.
No issues or pull requests were opened or closed in the last month, suggesting little current project activity, though the small open backlog is not severe by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
path-posix Version ^1.0.0 | — | — |
object-assign Version ^4.1.0 | — | — |
symlink-or-copy Version ^1.1.8 | — | — |
heimdalljs-logger Version ^0.1.7 | — | — |
@types/symlink-or-copy Version ^1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.