Package Health

msgpack-lite

Fast Pure JavaScript MessagePack Encoder and Decoder

Latest 0.2.2NPMNPM

88%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Health Score Breakdown

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational handoff buffer; however, recent activity from five contributors provides meaningful practical backing.

Repo bus factorcaution

Five contributors were active recently, and the top individual contributor accounts for about 46% of commits; the concentration is not ideal but is moderated by the remaining active contributors.

Repo toolingcaution

The repository uses a build tool, but no security-scanning tools are detected; this is a transparency and hygiene gap, though it is not evidence of unsafe behavior by itself.

Security policycaution

No security policy is present, leaving vulnerability-reporting expectations unclear; this is a genuine but moderate transparency gap.

Version stabilitycaution

Version 0.2.2 is not a prerelease and recent releases contain no prerelease versions, though remaining below major version 1 implies some API stability uncertainty.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
ieee754
Version ^1.2.1
—
—
isarray
Version ^2.0.5
—
—
event-lite
Version ^1.0.0
—
—
int64-buffer
Version ^1.1.1
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
11 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform