Regular expression for matching JavaScript identifiers
78%
Total Score
healthy
Healthy overall, supported by a recent release and transparent package contents despite single-contributor maintenance.
No build attestation or trusted-publisher provenance is present, reducing publication transparency. This is a supply-chain hygiene gap rather than evidence that the release is unsafe.
One registry maintainer account is listed, which is consistent with the repository being owned by an individual but leaves limited publishing redundancy.
The repository is owned by an individual account rather than an organization, so there is no shown organizational handoff capacity to offset the concentrated contributor base.
Only three releases have been published across about 2 years and 5 months, with one release in the last 12 months and a median interval of about 13 months. The recent release shows activity, but the long cadence limits evidence of sustained maintenance.
All two recent commits came from one contributor, so maintenance is concentrated in a single person and has limited demonstrated redundancy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
reserved-identifiers Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.