Package Health

proj4

Proj4js is a JavaScript library to transform point coordinates from one coordinate system to another, including datum transformations.

Latest 2.22.0NPMNPM

88%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Health Score Breakdown

Lifecycle scriptscaution

A prepare install-time script is present, adding some installation complexity and execution surface. The available evidence does not show it causing a maintenance or abandonment problem, so this is a modest concern rather than a severe one.

Repo toolingcaution

The project uses TypeScript, Rollup, Vitest, and npm scripts, showing a structured build and test toolchain. No security scanning tools were detected, leaving a minor hygiene gap.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts or script-injection counts, and two scope permissions at job level. However, all 18 action references are unpinned, and the high-confidence template-injection finding in release.yml is a genuine workflow hygiene concern; the two low-confidence cache findings carry little weight.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
mgrs
Version 1.0.0
—
—
wkt-parser
Version ^1.5.5
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
13 years ago
Unpacked Size
0.9 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform