Normalizes data that can be found in package.json files.
67%
Total Score
83
100
94
83
100
The package has existed since 2013 with 65 releases, but only one release in the last 12 months; the recent release keeps this from indicating abandonment.
Only one commit was recorded in the last three months, showing limited recent development activity despite the current release.
All 38 analyzed action references are unpinned, and high-confidence template-injection findings occur in pull-request and release workflows; the findings warrant workflow hygiene concerns, while no untrusted checkout or script-injection sink was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
semver Version ^7.3.5 | — | — |
hosted-git-info Version ^10.1.0 | — | — |
validate-npm-package-license Version ^3.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.