Use property paths like 'a.b.c' to get a nested value from an object. Even works when keys have dots in them (no other dot-prop library we tested does this, or does it correctly).
78%
Total Score
50
100
94
50
50
The release has no attestation or trusted-publisher provenance, so consumers receive less independently verifiable evidence about how the artifact was built.
One contributor made all three recent commits, leaving maintenance dependent on a single active person despite the repository being correctly linked to the package.
Three commits were made in the last three months, indicating recent activity, but the activity is modest and concentrated in one maintainer.
The project uses TypeScript, tsup, and gulp for builds, but no security-scanning tools were detected, leaving a modest transparency and hygiene gap.
No repository security policy was found, reducing clarity about vulnerability reporting and maintenance response.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.