periscopic
78%
Total Score
50
100
94
50
100
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the package still had a release about five months ago.
The repository uses TypeScript build tooling but reports no security-scanning tools. For a small library this is a modest transparency gap rather than a standalone adoption blocker.
No security policy is present in the repository. That weakens vulnerability-reporting transparency, but it does not by itself show that maintenance has stopped.
Both workflows were analyzed successfully with no reported findings, no untrusted checkouts, and no script injection. Four of seven action references are unpinned, leaving some build-integrity hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zimmerframe Version ^1.0.0 | — | — |
is-reference Version ^3.0.2 | — | — |
@types/estree Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.