jest-runtime
83%
Total Score
75
93
83
50
Health Score Breakdown
No build attestation or trusted-publisher provenance was recorded for the release, leaving publication origin less independently verifiable despite the active source project.
Recent activity is highly concentrated: one contributor made 70 of 73 commits. Organization backing provides some handoff capacity, but the observed contributor concentration remains a maintenance caution.
The repository name does not match this package and its README does not mention it, so ownership is less explicit. This is consistent with a monorepo subpackage but still warrants a small transparency caution.
All 11 workflows were analyzed, all 48 action references are pinned, and no untrusted checkout or script-injection sink was found. The audit still flags use of long-lived registry credentials, which is a workflow hygiene and release-integrity caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 glob Version ^13.0.6 | — | — |
chalk Version ^4.1.2 | — | — |
slash Version ^3.0.0 | — | — |
jest-mock Version 30.5.2 | — | — |
jest-util Version 30.5.1 | — | — |
Weekly Downloads
Info
- Last Published
- 24 days ago
- Created
- 10 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.