Communicate with a Web Worker using Promises, allowing transferList
55%
Total Score
50
100
83
75
The package has only 3 releases, with the latest published about 10 years ago and none in the last 12 months. This indicates a mature but potentially abandoned release line rather than active maintenance.
There were 0 commits and 0 active maintainers in the last 3 months, while the repository was last pushed about 6 years ago. This is the main adoption risk because defects and platform changes may not receive fixes.
The repository has 11 stars and 2 forks, indicating a small user and contributor footprint. This is supporting context rather than a decisive concern for a narrowly scoped package.
The repository uses npm build scripts, but no security scanning tooling was detected. For this older, small project this is a transparency gap, though it is less significant than the lack of recent maintenance.
No repository security policy was found, leaving disclosure and response expectations unclear. This is a minor transparency gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lie Version ^3.0.2 | — | — |
is-promise Version ^2.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.