return the github url from a package.json file
52%
Total Score
100
75
100
50
No build attestation or trusted-publisher provenance is available. This limits publication transparency, but the package is a small, directly published artifact rather than a complex build.
The package has only one release, published over 13 years ago, with no releases in the last 12 months. This is a meaningful maintenance concern, though a small utility can remain stable without frequent releases.
Version 0.0.0 is not a stable major release, which gives consumers less maturity assurance. The long-standing artifact and simple package scope partly compensate for that weakness.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.