Cross-platform process cpu % and memory usage of a PID
77%
Total Score
healthy
Only one release in the past year and no recent commits temper an otherwise established project.
The repository is owned by an individual account rather than an organization; this does not establish a defect, but it provides less institutional backing.
The project is mature at 4,540 days old with 54 releases, but only one release appeared in the last 12 months; the latest release is current, partly offsetting the slower cadence.
There were zero commits and zero active maintainers in the last three months, a maintenance warning that is partly softened by the repository having been pushed recently and a current release being published.
No type declarations are included, which can create extra integration work for TypeScript consumers, although the package remains usable as a JavaScript library.
All five workflows were analyzed with no reported audit findings or untrusted checkouts, but all 12 action references are unpinned, leaving avoidable workflow supply-chain exposure.
| Title | Versions | Severity |
|---|---|---|
CVE-2017-1000220 pidusage is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 1.1.4. | 0.0.0 - 1.1.4 | Critical |
CVE-2017-16034 pidusage is vulnerable to Improper Neutralization of Special Elements used in a Command ('Command Injection') in versions 0.0.0 - 1.1.4. | 0.0.0 - 1.1.4 | Low |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.