A simple http/s file downloader for node.js
68%
Total Score
caution
Seven months without commits, one maintainer, and all workflow actions unpinned temper an otherwise mature, stable package.
Only one registry publishing account is listed. With individual repository ownership and no organizational backing signal, this creates limited maintainer redundancy.
The repository is owned by an individual rather than an organization, so the package does not show organizational backing to compensate for its single-maintainer model.
The repository recorded zero commits and zero active maintainers during the last three months, leaving evidence of a quiet recent maintenance period despite the recent release history.
The project uses Babel and npm tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence of unsafe code.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.