nanomatch
Fast, minimal glob matcher for node.js. Similar to micromatch, minimatch and multimatch, but complete Bash 4.3 wildcard support only (no support for exglobs, posix brackets or braces)
62%
Total Score
50
50
81
100
50
Health Score Breakdown
The package has 31 releases since September 2016, but its latest registry release was in June 2018 and it had no releases in the last 12 months, indicating prolonged maintenance inactivity.
The repository had zero commits and zero active maintainers in the last three months, consistent with a project that is no longer actively maintained.
No build provenance attestation or trusted-publisher identity is present, leaving publication origin less verifiable. This is a supply-chain transparency gap, not a health verdict by itself.
The package declares 11 runtime dependencies, which adds maintenance surface for an older release, but the count alone does not establish an unsafe or unmaintainable dependency set.
There were no new or closed issues or pull requests in the last month, while five issues and three pull requests remain open, suggesting limited current project activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 kind-of Version ^6.0.2 | — | — |
arr-diff Version ^4.0.0 | — | — |
to-regex Version ^3.0.1 | — | — |
regex-not Version ^1.0.0 | — | — |
is-windows Version ^1.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 10 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.