module-deps
walk the dependency graph to generate json output that can be fed into browser-pack
63%
Total Score
75
50
86
100
50
Health Score Breakdown
No build attestation or trusted-publisher provenance is available for this release. That weakens publication transparency, though it is not by itself evidence that the package is unfit.
The package declares 15 runtime dependencies, which is a meaningful transitive maintenance surface for a utility library. No provided signal shows that these dependencies are stale or unsafe, so this is a moderate consideration rather than a severe defect.
The package has 139 releases since 2013, but its latest registry release was in August 2020 and it had no releases in the last 12 months. That long gap materially increases abandonment and compatibility risk.
The repository recorded zero commits and zero active maintainers in the last three months. Together with the stale registry release history, this points to slow current maintenance.
The repository reports no build tooling and no security scanning tools. This is a hygiene gap that leaves fewer automated safeguards visible, but it is partly offset by the repository's tests and security policy.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 xtend Version ^4.0.0 | — | — |
subarg Version ^1.0.0 | — | — |
defined Version ^1.0.0 | — | — |
parents Version ^1.0.0 | — | — |
resolve Version ^1.4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 13 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.