jsforce
jsforce 3.10.25 appears to be a healthy dependency: it has a long release history of 144 releases over roughly 12.6 years, 23 releases in the last 12 months, a current stable major version, and no registry deprecation. The linked organization-owned repository is active, unarchived, recently pushed, has seven active maintainers and 22 commits in the last three months, and includes tests, a changelog, build tooling, and Dependabot scanning. Licensing and TypeScript declarations are also clearly provided. The main reservations are absent build provenance attestations, no repository security policy, and incomplete workflow permission declarations, which reduce supply-chain transparency but do not outweigh the strong maintenance and project-backing evidence.
92%
Total Score
100
50
100
80
50
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 faye Version ^1.4.0 | — | — |
open Version ^7.0.0 | — | — |
undici Version ^8.5.0 | — | — |
xml2js Version ^0.6.2 | — | — |
core-js Version ^3.45.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 12 years ago
- Unpacked Size
- 33.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.