[type-definitions]: https://github.com/jestjs/jest/blob/main/packages/jest-types/src/Circus.ts
82%
Total Score
88
89
83
Three contributors were active recently, but one contributor made about 96% of the commits. The organization backing provides some handoff capacity, yet the observed activity remains highly concentrated.
The linked repository name does not match jest-circus and its README does not mention the package, so the package-to-repository relationship is less transparent despite the repository being the Jest monorepo.
The repository uses established build tooling and the package has a build process, though no security-scanning tools were detected. This is a modest transparency gap rather than evidence of abandonment.
All 11 workflows were analyzed with no untrusted checkout, script injection, high- or medium-severity findings, and all 48 action references pinned. The audit reported an informational trusted-publishing finding and three workflows with top-level write permissions, which warrant limited caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
co Version ^4.6.0 | — | — |
chalk Version ^4.1.2 | — | — |
slash Version ^3.0.0 | — | — |
dedent Version ^1.6.0 | — | — |
p-limit Version ^3.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.