picomatch-browser

(temporary fork of picomatch) Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.

Latest 2.2.6

NPM

15%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Name lookalike

The package has 100% artifact overlap with picomatch, borrows its identity, and identifies itself as that package; consumers most likely wanted picomatch rather than this differently owned copy.

Release history

The package has only five releases, all ending on December 11, 2021, with no release in more than four years; that is a serious abandonment and release-tracking concern even though the linked repository is active.

Repo package mention

The linked repository is named picomatch and neither matches picomatch-browser nor mentions that package in its README, so it may not actually maintain this release.

Workflow audit

The single workflow was fully analyzed with no untrusted checkout or script injection, and all three action references are pinned. Top-level write permissions and a high-confidence low-severity adhoc-package finding are minor hygiene concerns, not severe risks on their own.