An ini encoder/decoder for node
86%
Total Score
63
100
100
100
100
All recent commits came from one contributor, creating short-term contributor concentration. Because the repository is owned by an organization, maintenance can be handed off more readily than in a lone-maintainer project.
Only one commit and one active maintainer were observed over the last three months, which is a modest maintenance concern. The recent 7.0.0 release and organizational backing provide meaningful compensation.
The repository has open issues and pull requests, with two new pull requests in the last month, but no issues or pull requests were closed in that period. This is a minor activity concern, offset by the recent release and other maintenance evidence.
| Title | Versions | Severity |
|---|---|---|
CVE-2020-7788 ini is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 1.3.6. | 0.0.0 - 1.3.6 | High |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.