Parse CLI arguments.
64%
Total Score
50
100
83
50
The package has 22 releases since May 2015, but none in the last 12 months and the latest registry release was over five years ago. This materially increases staleness risk, although the linked repository was pushed more recently.
The package defines a prepare install lifecycle script. That can execute package-controlled work during installation and warrants extra scrutiny, even though no more severe behavior is shown here.
The repository is owned by an individual rather than an organization, so continuity depends on a narrow ownership base. The matching repository and README reference provide useful compensation.
No commits and no active maintainers were recorded in the last three months. This suggests current development has slowed, though the repository's July 2025 push provides some counterevidence.
The repository uses npm scripts but has no detected security scanning tools. This is a modest transparency and maintenance gap rather than evidence of abandonment on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.