Parse and display moments in any timezone.
80%
Total Score
healthy
Healthy, with regular releases and active maintenance despite the project's legacy status.
The project uses Grunt and TypeScript, but no security-scanning tooling was detected, leaving a modest transparency and hygiene gap.
No repository security policy was found, which makes vulnerability reporting expectations less clear.
All five analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning finding has low confidence and is not independently weighted as a serious risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
moment Version ^2.29.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.