Package Health

preferred-pm

Detects what package manager was used for installation

Latest 5.0.1NPMNPM

68%

Total Score

caution

Usable with caveats: recent releases are offset by one-contributor maintenance and an unclear package-to-repository match.

Health Score Breakdown

Project backingcaution

The repository owner is an individual user rather than an organization, so there is no provided organizational backing to offset the concentrated contributor base.

Repo bus factorcaution

One contributor made all 2 recent commits, leaving maintenance fully concentrated in a single person.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, showing some recent activity but a relatively light maintenance pace.

Repo package mentioncaution

The linked repository name does not match preferred-pm and its README does not mention the package, so the package-to-repository relationship is not transparent.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security scanning tooling was detected; this is a modest transparency gap rather than a release blocker.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
which-pm
Version ^4.0.0
—
—
find-up-simple
Version ^1.0.1
—
—
find-yarn-workspace-root2
Version 1.2.53
—
—

Weekly Downloads

Info

Last Published
15 days ago
Created
8 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform