Package Health

probe-image-size

Get image size without full download (JPG, GIF, PNG, WebP, BMP, TIFF, PSD)

Latest 7.4.0NPMNPM

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factorcaution

All 10 recent commits came from one contributor, creating a meaningful continuity risk. Organization backing partly compensates because maintenance can potentially be handed off.

Repo toolingcaution

No build tools or security-scanning tools were detected. This is a modest process gap, although the package has active commits, tests in the repository, and a clean workflow audit.

Type declarationscaution

No type declarations are published. This is a minor integration gap for consumers using TypeScript, but it does not by itself indicate abandonment or unsafe maintenance.

Workflow auditcaution

All workflows were analyzed with no audit findings, no untrusted checkouts, and read-only permissions. However, all three action references are unpinned, leaving a modest reproducibility and action-update risk.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-86953
probe-image-size is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 2.0.0 - 7.3.0.
2.0.0 - 7.3.0
High

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
needle
Version ^2.5.2
—
—
lodash.merge
Version ^4.6.2
—
—
stream-parser
Version ~0.3.1
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
11 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform