Parse and generate MQTT packets like a breeze
72%
Total Score
63
100
90
75
The project has 74 releases over roughly 12 years, but it has published no registry release in the last 12 months; this is a maintenance concern despite its mature history.
All two recent commits came from one contributor. The organization-owned repository provides some handoff capacity, but current activity remains concentrated.
Two commits were made in the last three months, showing recent activity, but only one active maintainer contributed, so the maintenance pace is light.
Recent issue and pull-request activity shows the project is not abandoned, although no issues or pull requests were closed or merged in the last month.
No build or security-scanning tools were detected. This is a hygiene gap, though the package is a small JavaScript library with a straightforward source tree.
| Title | Versions | Severity |
|---|---|---|
CVE-2019-5432 mqtt-packet is vulnerable to Out-of-bounds Read in versions 0.0.0 - 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1 and 6.0.0 - 6.1.2. | 0.0.0 - 3.5.14.0.0 - 4.1.35.0.0 - 5.6.1 +1 more | High |
CVE-2016-10523 mqtt-packet is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 3.4.6 and 4.0.0 - 4.0.5. | 0.0.0 - 3.4.64.0.0 - 4.0.5 | High |
| Dependency | Last Release | Score |
|---|---|---|
bl Version ^6.0.8 | — | — |
debug Version ^4.3.4 | — | — |
process-nextick-args Version ^2.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.