istanbul-lib-instrument
Core istanbul API for JS code coverage
61%
Total Score
67
90
75
Health Score Breakdown
The package has a substantial history with 75 releases, but its latest release was over two years ago and there were no releases in the last 12 months, indicating slowed maintenance.
There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance activity has slowed.
The repository has 163 open issues and 39 open pull requests, with no issues closed and no pull requests merged in the last month, suggesting backlog and limited recent throughput.
The audit completed all two workflows and found no untrusted checkouts or script injections, but all seven action references are unpinned and the release workflow has a medium-confidence template-injection finding. The trusted-publishing finding is informational and not itself a major concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 semver Version ^7.5.4 | — | — |
@babel/core Version ^7.23.9 | — | — |
@babel/parser Version ^7.23.9 | — | — |
@istanbuljs/schema Version ^0.1.3 | — | — |
istanbul-lib-coverage Version ^3.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 10 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.