Package Health

mqtt-packet

Parse and generate MQTT packets like a breeze

Latest 9.0.2NPMNPM

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

90

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

The project has 74 releases over roughly 12 years, but it has published no registry release in the last 12 months; this is a maintenance concern despite its mature history.

Repo bus factorcaution

All two recent commits came from one contributor. The organization-owned repository provides some handoff capacity, but current activity remains concentrated.

Repo commit activitycaution

Two commits were made in the last three months, showing recent activity, but only one active maintainer contributed, so the maintenance pace is light.

Repo issue activitycaution

Recent issue and pull-request activity shows the project is not abandoned, although no issues or pull requests were closed or merged in the last month.

Repo toolingcaution

No build or security-scanning tools were detected. This is a hygiene gap, though the package is a small JavaScript library with a straightforward source tree.

Vulnerabilities

TitleVersionsSeverity
CVE-2019-5432
mqtt-packet is vulnerable to Out-of-bounds Read in versions 0.0.0 - 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1 and 6.0.0 - 6.1.2.
0.0.0 - 3.5.14.0.0 - 4.1.35.0.0 - 5.6.1 +1 more
High
CVE-2016-10523
mqtt-packet is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 3.4.6 and 4.0.0 - 4.0.5.
0.0.0 - 3.4.64.0.0 - 4.0.5
High

Package versions

Direct Dependencies

DependencyLast ReleaseScore
bl
Version ^6.0.8
—
—
debug
Version ^4.3.4
—
—
process-nextick-args
Version ^2.0.1
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
11 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform