a tiny JavaScript expression parser
68%
Total Score
50
100
89
50
The package has a prepare lifecycle script. This is a supply-chain and installation-complexity consideration, although the provided signals do not show harmful behavior.
The repository is owned by an individual rather than an organization, so the limited backing context provides no evidence of broader maintenance capacity.
This is a mature package with 33 releases since December 2013, but it has had no registry release in about 22 months, which lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern about slowed maintenance.
There were no new or closed issues in the last month and one new pull request with none merged, showing limited recent project movement.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.