LRU Queue
55%
Total Score
50
100
86
50
One registry maintainer handles publishing, creating a thin operational base. The matching repository and coherent package contents provide some compensating ownership evidence.
This is the package's only release, published in April 2014, with no releases in the last 12 months. That long release gap is a meaningful maintenance concern for a dependency.
The repository had zero commits and zero active maintainers in the last 3 months. Although it was pushed in December 2022, current development activity is not evident.
The repository uses a build tool but reports no security scanning tools. For this small package that is a modest transparency and maintenance gap, not a severe risk.
The repository has no security policy, which reduces transparency for reporting and handling dependency issues. This is a hygiene gap rather than evidence of abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
es5-ext Version ~0.10.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.