Fast Pure JavaScript MessagePack Encoder and Decoder
88%
Total Score
75
100
89
90
100
The repository is owned by an individual rather than an organization, so there is no organizational handoff buffer; however, recent activity from five contributors provides meaningful practical backing.
Five contributors were active recently, and the top individual contributor accounts for about 46% of commits; the concentration is not ideal but is moderated by the remaining active contributors.
The repository uses a build tool, but no security-scanning tools are detected; this is a transparency and hygiene gap, though it is not evidence of unsafe behavior by itself.
No security policy is present, leaving vulnerability-reporting expectations unclear; this is a genuine but moderate transparency gap.
Version 0.2.2 is not a prerelease and recent releases contain no prerelease versions, though remaining below major version 1 implies some API stability uncertainty.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ieee754 Version ^1.2.1 | — | — |
isarray Version ^2.0.5 | — | — |
event-lite Version ^1.0.0 | — | — |
int64-buffer Version ^1.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.