lop
Create parsers using parser combinators with helpful error messages
58%
Total Score
50
90
50
50
Health Score Breakdown
The release has no build attestation or trusted-publisher provenance, so consumers cannot independently verify how the artifact was produced.
Registry publishing access is held by one maintainer. The repository is individually owned rather than organization-backed, so there is limited visible publishing and ownership redundancy.
The package has existed since 2012 and has 10 releases, but it has had no release in the last 12 months; the latest release was about two years ago, which raises abandonment concern.
The repository recorded no commits and no active maintainers in the last three months, consistent with the roughly two-year release gap and weakening confidence in ongoing maintenance.
The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 duck Version ^0.1.12 | — | — |
option Version ~0.2.1 | — | — |
underscore Version ^1.13.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 14 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.