A tiny javascript type testing tool
68%
Total Score
50
100
94
63
100
A prepare install-time script is present, adding execution during installation; the signal provides no further detail showing that this script is necessary or harmless.
Only one registry publishing account is listed. Because the repository owner is also a user rather than an organization, this represents a genuinely thin publishing and maintenance base.
The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to offset the single-maintainer concern.
The package has existed for over eight years with 28 releases and one release in the last 12 months, but the recent cadence is sparse enough to warrant some maintenance caution.
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful slowdown, although the recent release and release notes show some activity within the broader period.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.