gpt-tokenizer
A pure JavaScript BPE tokenizer with model metadata and pricing for GPT-5, GPT-4o, o-series, and other OpenAI models
82%
Total Score
healthy
Regular releases, current source activity, and trusted publishing support this release; one maintainer and unpinned workflow actions add risk.
Health Score Breakdown
The package runs a prepare install-time script. That is an additional installation behavior to account for, although this signal does not show a destructive or network-fetching action.
Only one registry account has publish access. That is consistent with the repository owner, but it leaves publishing continuity dependent on a single person.
One contributor made all 11 recent commits, giving the project a single-person bus factor and increasing continuity risk despite the recent activity.
The repository recorded 11 commits in the last 3 months, but all were made by one active maintainer, so activity is current yet concentrated.
No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though the repository does use CodeQL and Dependabot.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 3 years ago
- Unpacked Size
- 26 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.