Parse paths (local paths, urls: ssh/git/etc)
68%
Total Score
50
100
90
88
The repository is owned by an individual rather than an organization, so there is no visible organizational backing to offset the thin recent activity.
The package is mature, with 22 releases over more than 13 years, but it has had no release in the past year; that lowers confidence in ongoing maintenance.
There were no commits and no active maintainers in the past three months, indicating limited current development capacity.
Only one issue is open, with no recent issue or pull-request activity; this is consistent with a quiet project but offers little evidence of active support.
The repository has no build tooling or security scanning configured. This is a hygiene gap, but the small, straightforward package and matching release evidence reduce its weight.
| Title | Versions | Severity |
|---|---|---|
CVE-2022-0624 parse-path is vulnerable to Authorization Bypass Through User-Controlled Key in versions 0.0.0 - 5.0.0. | 0.0.0 - 5.0.0 | High |
| Dependency | Last Release | Score |
|---|---|---|
protocols Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.