legacy-javascript
Identify legacy polyfills and code transforms
64%
Total Score
caution
A tiny package points to a different project, with slow releases and weak workflow pinning.
Health Score Breakdown
No build attestation or trusted-publisher configuration is present, leaving the artifact's build origin less transparent than it could be.
The package has only 3 releases across 559 days, with a median interval of about 280 days. The latest release is current, but the sparse cadence limits maturity evidence.
The repository name does not match the package name and its README does not mention this package, so the artifact's relationship to the source project is unclear. Monorepo packaging can explain a name mismatch, but the absent README mention remains a transparency gap.
The repository has no published security policy, reducing transparency about vulnerability reporting and response expectations.
Version 0.0.3 is not a prerelease, but it remains below 1.0, which signals a relatively immature compatibility commitment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 1 year ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.