prom-client
Client for prometheus
40%
Total Score
100
100
81
88
50
Health Score Breakdown
The entire package is marked deprecated, with npm stating that it has been replaced by @prometheus-io/client; this is a direct adoption risk even though the specific release is not separately withdrawn.
No build provenance attestation or trusted publisher information is present, leaving publication origin less independently verifiable than it could be.
A prepare install-time lifecycle script is present, which adds some installation complexity, although this signal alone does not establish a severe risk.
This is a mature package with 84 releases and a typical historical interval of about 15 days, but it has had no registry release in the last 12 months, consistent with its deprecated status.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tdigest Version ^0.1.1 | — | — |
@opentelemetry/api Version ^1.4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 10 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.