Resolve npm package details, like name and base path, given an absolute path to a file inside a package
68%
Total Score
50
100
86
50
The package has existed for over 10 years, but it has had no release in the last 12 months and the latest release was about 17 months ago, indicating slowing maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern for a single-maintainer project.
No type declarations are included, which modestly reduces usability for TypeScript consumers, though the package exposes a small utility API.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, leaving a minor build-reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.