Keccak sponge function family
60%
Total Score
67
100
88
63
50
No build attestation, trusted publisher, or staged publishing is recorded, leaving the origin of the published artifact less transparent.
An install lifecycle script runs during installation, adding build or execution behavior that deserves attention beyond ordinary package extraction.
The package has had 16 releases since May 2016, but none in the last three years; this indicates substantially slowed maintenance for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence of slowed maintenance.
There are five open issues and one open pull request, but no issues or pull requests were opened or closed in the last month; activity is limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
node-addon-api Version ^2.0.0 | — | — |
node-gyp-build Version ^4.2.0 | — | — |
readable-stream Version ^3.6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.