Package Health

newman

Command-line companion utility for Postman

Latest 6.2.2NPMNPM

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

95

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Health Score Breakdown

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This limits publication transparency, but it is not by itself evidence that the release is unsafe.

Dependency profilecaution

The package declares 21 runtime dependencies, which adds maintenance surface for a command-line tool. No supplied signal shows that this dependency breadth is currently causing instability.

Release historycaution

The project has existed for over 12 years with 172 releases, but only one release appeared in the last 12 months. The long history supports maturity, while the recent cadence warrants caution.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months. This is the strongest maintenance concern, although the recent repository push and current release history provide some compensating evidence.

Repo issue activitycaution

The repository has ongoing pull request and issue activity, including seven new pull requests in the past month, but no pull requests were merged and no issues were closed during that period.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
async
Version 3.2.5
—
—
colors
Version 1.4.0
—
—
lodash
Version 4.17.21
—
—
mkdirp
Version 3.0.1
—
—
semver
Version 7.6.3
—
—

Weekly Downloads

Info

Last Published
8 months ago
Created
12 years ago
Unpacked Size
0.3 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform