The industry standard for API mocking in JavaScript.
88%
Total Score
healthy
Healthy release with sustained maintenance, strong packaging, and a well-supported source project.
All 12 recent commits came from one contributor, creating a real concentration risk. Organization backing partly offsets this because maintenance can potentially be handed off.
No repository security policy was found, which reduces transparency for reporting vulnerabilities.
All seven workflows were analyzed, with no untrusted checkout or script-injection findings. Two workflows have broad top-level write permissions, and high-confidence adhoc package installations plus trusted-publishing usage warrant workflow hygiene caution; the cache finding is low confidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yargs Version ^18.2.0 | — | — |
cookie Version ^2.0.1 | — | — |
rettime Version ^0.11.12 | — | — |
@msw/url Version ^0.1.2 | — | — |
type-fest Version ^5.5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.