transform humanize time to ms
70%
Total Score
83
100
90
80
50
No build attestation or trusted publisher identity is present, so consumers have limited independent evidence connecting the published artifact to its source build.
The package has existed for about 12 years but has only 6 releases, with no release in roughly 21 months. That suggests slow maintenance, though the latest release is recent enough to remain usable for a small utility.
There were no commits and no active maintainers in the last 3 months, reinforcing the roughly 21-month gap since the latest release.
The repository uses TypeScript build tooling, but no security scanning tool was detected. The missing scanner is a modest transparency gap rather than a severe risk.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ms Version ^2.1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.