Package Health

pathval

Object value retrieval given a string path

Latest 2.0.1NPMNPM

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

The package is mature, with releases since 2013, but it has had no release in the last 12 months. That suggests slower maintenance for a dependency, though the latest release is still relatively recent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a maintenance concern, partly offset by the repository being pushed recently and the package having a current stable release.

Repo toolingcaution

No build tool or security scanning tool was detected. For this small JavaScript package the build gap is limited, but the absence of security scanning is a modest hygiene concern.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, although it does not by itself make this small, dependency-free package unfit.

Vulnerabilities

TitleVersionsSeverity
CVE-2020-7751
pathval is vulnerable to Improper Input Validation in versions 0.0.0 - 1.1.1.
0.0.0 - 1.1.1
High

Package versions

Maintainers

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 year ago
Created
12 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform