Package Health

geobuf

Compact binary encoding for geographic data

Latest 4.0.0NPMNPM

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

92

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent release partly offsets this, but the lack of current development activity lowers maintenance confidence.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, with 32 issues still open. This suggests limited recent project movement, though it is not evidence of abandonment by itself.

Repo toolingcaution

The project uses npm scripts and Rolldown for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk on its own.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, both of its two action references are unpinned, leaving a modest dependency-integrity hygiene gap.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-400467 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
geobuf is vulnerable to Prototype Pollution in versions 1.0.0 - 3.0.2.
1.0.0 - 3.0.2
Medium

Package versions

Direct Dependencies

DependencyLast ReleaseScore
pbf
Version ^4.0.1
—
—
shapefile
Version ~0.6.6
—
—

Weekly Downloads

Info

Last Published
5 months ago
Created
12 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform