Native Promise Only: A polyfill for native ES6 Promises **only**, nothing else.
22%
Total Score
50
100
58
83
The latest release was published over 11 years ago, with no releases in the last 12 months. This strongly indicates that maintenance has stopped.
The linked repository is archived, and it was last pushed in October 2019. An archived source project is a severe abandonment risk for a dependency.
Only one registry account has publish access. The repository owner is an individual, so there is no organizational backing shown to compensate for the thin publishing base.
The project uses npm scripts but has no security-scanning tools. For an archived package this adds to the lack of evidence that dependency or build risks are being monitored.
The repository has no security policy. This reduces transparency and leaves no documented process for handling security reports.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.