Returns true if a value has the characteristics of a valid JavaScript accessor descriptor.
79%
Total Score
83
100
100
67
The package declares prepack and prepublish scripts. These are packaging-related rather than install-time execution, but they add some release-process complexity.
One contributor made all four commits in the last three months. Organization backing provides some handoff capacity, but no second contributor was active in that period.
All six workflows were analyzed with no audit findings or untrusted checkouts. However, all six action references are unpinned and one workflow grants top-level write access, creating a moderate reproducibility and workflow-hygiene concern without an observed dangerous sink.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gopd Version ^1.2.0 | — | — |
hasown Version ^2.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.