Prebuilt Linux x64 GNU binaries for jscpd
84%
Total Score
healthy
Active project, signed provenance, and a clear native-package README outweigh concentrated commits and workflow hygiene concerns.
Although 16 contributors were active, one contributor made about 85% of recent commits, leaving maintenance unusually concentrated and increasing continuity risk.
All eight workflows were analyzed and use read-only permissions, with no untrusted checkouts or script-injection findings. However, high-confidence template-injection findings, secrets inheritance, and several ad hoc package installs remain workflow hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.