Package Health

pidusage

Cross-platform process cpu % and memory usage of a PID

Latest 4.1.0NPMNPM

77%

Total Score

healthy

Only one release in the past year and no recent commits temper an otherwise established project.

Are you affected? Scan for Free

Health Score Breakdown

Project backingcaution

The repository is owned by an individual account rather than an organization; this does not establish a defect, but it provides less institutional backing.

Release historycaution

The project is mature at 4,540 days old with 54 releases, but only one release appeared in the last 12 months; the latest release is current, partly offsetting the slower cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a maintenance warning that is partly softened by the repository having been pushed recently and a current release being published.

Type declarationscaution

No type declarations are included, which can create extra integration work for TypeScript consumers, although the package remains usable as a JavaScript library.

Workflow auditcaution

All five workflows were analyzed with no reported audit findings or untrusted checkouts, but all 12 action references are unpinned, leaving avoidable workflow supply-chain exposure.

Vulnerabilities

TitleVersionsSeverity
CVE-2017-1000220
pidusage is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 1.1.4.
0.0.0 - 1.1.4
Critical
CVE-2017-16034
pidusage is vulnerable to Improper Neutralization of Special Elements used in a Command ('Command Injection') in versions 0.0.0 - 1.1.4.
0.0.0 - 1.1.4
Low

Package versions

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
4 days ago
Created
12 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform