Simplify your schema by combining allOf into the root schema, safely.
61%
Total Score
33
100
78
75
50
The package has had no release for about 5 years and 7 months, with no releases in the last 12 months. Its 14-release history shows prior activity but does not offset the long current pause.
The repository recorded zero commits and zero active maintainers over the past three months. The January 2024 push shows the repository is not abandoned outright, but current maintenance momentum is weak.
No build attestation or trusted-publisher provenance is present. This weakens publication transparency, though it is not a health failure on its own.
Only one registry account has publish access, creating a thin publishing base. The linked repository is user-owned rather than organization-backed, so no provided signal compensates for that concentration.
There were no new or closed issues and no new or merged pull requests in the last month, while 11 issues and 7 pull requests remain open. This suggests limited current maintenance response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lodash Version ^4.17.20 | — | — |
compute-lcm Version ^1.1.2 | — | — |
json-schema-compare Version ^0.2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.