Pure-JS printf
62%
Total Score
75
100
90
88
50
No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent, though this is a moderate transparency gap rather than a standalone adoption blocker.
The package has 14 releases over roughly 10 years, but no releases in the last 12 months and its latest release was in January 2022, indicating prolonged inactivity.
There were zero commits and zero active maintainers in the last three months, reinforcing that maintenance has effectively stopped since the 2022 release period.
Only one issue is open and there has been no issue or pull-request activity in the last month, consistent with a quiet mature project but not evidence of active maintenance.
The repository uses Make and npm scripts for builds, but has no security-scanning tools, leaving a security-hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.