`jest-docblock` is a package that can extract and parse a specially-formatted comment called a "docblock" at the top of a file.
86%
Total Score
83
100
94
88
One contributor made about 96% of the recent commits, creating a concentration concern. The repository is organization-owned and two other contributors remained active, which partly compensates for the narrow recent contribution base.
The repository name does not match the package and its README does not mention jest-docblock, so the package-to-repository link is less transparent. The mismatch is consistent with a monorepo sub-package, but the missing README mention remains a caution.
All 11 workflows were analyzed, all 48 action references are pinned, and no untrusted checkout or script-injection path was found. The audit reports high-confidence use of trusted publishing as a hygiene concern, while write permissions remain limited to three workflows.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
detect-newline Version ^3.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.