moment

Parse, validate, manipulate, and display dates

Latest 2.31.0

NPM

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

One contributor made 35 of 38 recent commits, or about 92%, while the second made 3. The organization backing provides some handoff capacity, but the observed work is still highly concentrated.

Repo commit activity

The repository recorded 38 commits in three months from two active maintainers. That is meaningful current activity, though the small active base limits resilience.

Repo tooling

The project uses TypeScript, npm scripts, and Rollup, but no security-scanning tools were detected. The missing scanning coverage is a genuine transparency and maintenance gap, partly offset by the repository's security policy and controlled workflows.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-947101 moment is vulnerable to Path Traversal in versions 2.29.2 - 2.30.1.	2.29.2 - 2.30.1	Medium
CVE-2022-31129 moment is vulnerable to Uncontrolled Resource Consumption in versions 2.18.0 - 2.29.4.	2.18.0 - 2.29.4	High
CVE-2022-24785 moment is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 2.29.2.	0.0.0 - 2.29.2	High
CVE-2017-18214 moment is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 2.19.3.	0.0.0 - 2.19.3	High
CVE-2016-4055 moment is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 2.11.2.	0.0.0 - 2.11.2	Medium