A simple list of possible Typed Array names.
78%
Total Score
50
100
94
75
50
No build provenance attestation or trusted publisher is recorded, leaving publication origin less independently verifiable despite the otherwise transparent source repository.
The package uses prepack and prepublish scripts. These are publication-related rather than consumer install hooks, so they are only a minor supply-chain consideration.
The registry has one publishing maintainer. The linked repository and recent activity provide some backing, but the publishing base remains narrow.
There have been only two releases, with no releases in the last 12 months and about 19 months since the latest release at collection time. The repository's recent push provides some compensating evidence, but release activity is still sparse.
There were no commits or active maintainers in the three months before collection, although the repository had a push about eight months earlier. This suggests a quiet project and offsets, but does not negate, its simple stable scope.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.