Transforms the string to lower case
18%
Total Score
50
71
75
The entire package is deprecated on npm, with guidance to use native `toLowerCase` or `toLocaleLowerCase`; no replacement package is provided. This directly makes the release unfit for a new dependency.
The package has 14 releases over roughly 12.6 years, but no releases in the last 12 months and its latest release was in September 2023. That is consistent with an effectively retired package.
The linked repository recorded zero commits and zero active maintainers over the last three months. Its recent push date provides some context, but does not offset the current lack of development activity.
The repository name does not match `lower-case`, and its README does not mention the package. Although a monorepo subpackage can legitimately have a different name, this leaves package ownership less transparent.
The single workflow was fully analyzed with no injection findings or high-severity issues. All three action references are unpinned, creating a modest reproducibility and workflow supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.