Package Health

gettext-converter

po2js and js2po and i18next2po and po2i18next converter gettext resource utils

Latest 1.4.0NPMNPM

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

80

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

90

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Are you affected? Scan for Free

Health Score Breakdown

Build provenancecaution

No build attestation, trusted publisher identity, or staged publishing is present, leaving the release-to-source build path less transparent.

Repo bus factorcaution

All 4 recent commits were made by one contributor, giving the project a low recent bus factor. The organization-owned repository provides some handoff capacity, but no second active contributor is observed.

Repo issue activitycaution

There are 2 open issues and no issue or pull-request activity in the last month. This suggests limited visible community activity, although it is partly offset by recent commits and releases.

Repo popularitycaution

The repository has only 7 stars and 4 forks, indicating a small user and contributor footprint. Popularity is supporting evidence rather than a verdict, so this is a minor concern.

Repo toolingcaution

The repository uses Babel for builds and has a security policy, but no security-scanning tooling was detected. The policy is a positive compensating signal, while the missing scanning remains a transparency gap.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-63709
gettext-converter is vulnerable to Prototype Pollution in versions 1.0.0 - 1.3.3.
1.0.0 - 1.3.3
Medium
AIKIDO-2026-429232
gettext-converter is vulnerable to Prototype Pollution in versions 0.0.1 - 1.3.2.
0.0.1 - 1.3.2
Medium

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
arrify
Version ^2.0.1
—
—
encoding
Version 0.1.13
—
—
content-type
Version 1.0.5
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
6 years ago
Unpacked Size
1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform