Outputs licenses from 3rd party libraries to a file
57%
Total Score
33
100
78
50
The package has 80 releases over more than 10 years, but its latest release was in February 2022 and it had no releases in the last 12 months. That long release gap is a meaningful maintenance concern.
The repository had zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates currently inactive development.
Only one account has registry publish access, leaving a thin publishing base. This is a resilience concern because a single maintainer may be a bottleneck for fixes or releases.
There were no new or closed issues or pull requests in the last month, while 11 issues and 2 pull requests remain open. This suggests limited recent project responsiveness.
The repository uses TypeScript, webpack, and npm scripts for building, showing a defined build process. It reports no security scanning tools, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webpack-sources Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.