Is this value a JS DataView? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.
68%
Total Score
75
100
90
88
50
No build attestation or trusted-publisher identity is present, reducing publication transparency, but this is a provenance gap rather than evidence that the release is unsafe.
Only three releases exist, and there have been no releases in the last 12 months; the latest release was about 21 months ago. This limits evidence of ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern that maintenance has gone quiet.
There is one open issue and no issue or pull-request activity in the last month, offering little evidence of active maintenance.
The repository uses TypeScript build tooling and has a build system, but no security scanning tools were detected. The missing scanning is a modest hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
call-bound Version ^1.0.2 | — | — |
get-intrinsic Version ^1.2.6 | — | — |
is-typed-array Version ^1.1.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.