The official Node.js client library for Gel
76%
Total Score
67
100
95
75
100
The repository recorded zero commits and zero active maintainers over the last three months. Recent releases and six merged pull requests provide some compensation, but the lack of observed commits is a meaningful maintenance concern.
There were no new or closed issues in the last month, but six pull requests were merged; this mixed activity suggests some maintenance continues without showing broad issue throughput.
The repository uses build tooling, TypeScript, and npm scripts, but no security-scanning tools were detected. The missing scanning coverage is a transparency and maintenance gap.
No security policy was found in the repository, leaving vulnerability-reporting expectations unclear for a database client library.
All three workflows lack top-level permission declarations, and none declares read-only permissions. Two use job-level permissions, but the repository still has incomplete least-privilege documentation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
debug Version ^4.3.4 | — | — |
which Version ^4.0.0 | — | — |
semver Version ^7.6.2 | — | — |
env-paths Version ^3.0.0 | — | — |
shell-quote Version ^1.8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.