Get Pretty Quick
72%
Total Score
75
100
90
88
100
The package is mature, with 45 releases since 2018, but it has had no registry releases in the last 12 months despite a median historical interval of about 2 days.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning even though it was pushed recently and has organizational backing.
There were three new pull requests in the last month, but none merged and no issues were closed, offering limited evidence of current maintenance.
The project uses TypeScript and npm build tooling, but no security scanning tools were detected; this is a modest transparency gap rather than a severe dependency risk.
All six workflows were analyzed with no untrusted checkout or script-injection findings; four use read-only permissions. Two workflows have top-level write permissions and one of 16 action references is unpinned, creating minor hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mri Version ^1.2.0 | — | — |
tslib Version ^2.8.1 | — | — |
ignore Version ^7.0.5 | — | — |
tinyexec Version ^0.3.2 | — | — |
picomatch Version ^4.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.