node-sass
Wrapper around libsass
12%
Total Score
50
63
50
50
Health Score Breakdown
The entire package is deprecated, with npm directing users to sass or sass-embedded instead; this directly signals that new dependencies should not adopt it.
The package has a long release history, but it has had no releases in the last 12 months and its latest release was in May 2023.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment risk shown by its archived status.
The source repository is archived, so it is no longer an actively maintained dependency despite a push recorded in July 2024.
No build attestation or trusted-publishing provenance is present, leaving the origin of the published artifact less transparent; this is an added concern alongside the maintenance gaps.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2020-24025 node-sass is vulnerable to Improper Certificate Validation in versions 2.0.0 - 7.0.0. | 2.0.0 - 7.0.0 | Medium |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nan Version ^2.17.0 | — | — |
gaze Version ^1.0.0 | — | — |
glob Version ^7.0.3 | — | — |
meow Version ^9.0.0 | — | — |
chalk Version ^4.1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 14 years ago
- Unpacked Size
- 1.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.