ohash
It has no runtime dependencies, complete type declarations, and a clear README. The organization-backed project also shows four active contributors and pinned workflow actions, while workflow package installs and missing security scanning are minor gaps.
88%
Total Score
100
100
94
75
50
Health Score Breakdown
No build attestation or trusted-publisher metadata is available, leaving publication provenance less transparent, though the coherent repository and package structure provide some compensating evidence.
The project uses TypeScript, npm scripts, and esbuild, showing an established build process. No security scanning tools were detected, which is a modest hygiene gap.
The repository has no security policy, reducing transparency for vulnerability reporting and coordinated disclosure.
Both workflows were analyzed successfully, use no unpinned actions, and expose no high- or medium-severity findings. High-confidence low-severity adhoc package installation appears in both workflows, warranting only a minor hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 4 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.