Run a function exactly one time
70%
Total Score
50
100
86
88
The package has 7 releases since 2012, but version 1.4.0 was published in September 2016 and there have been no releases in the last 12 months. That is a meaningful maintenance concern, though the package is a small stable utility.
There were no commits or active maintainers in the last 3 months. Combined with no registry release since September 2016, this indicates little current maintenance capacity.
The repository reports no build tools or security scanning tools. This is a small plain JavaScript package, so the gap is limited, but it reduces maintenance transparency.
Both workflows lack top-level token permission declarations. No workflow requests top-level write access, but explicit least-privilege permissions would provide stronger workflow hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wrappy Version 1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.