A utility for managing a prototype chain
62%
Total Score
50
100
83
83
The latest registry release was over 11 years ago, and there have been no releases in the last 12 months. That is a meaningful sign of a possibly abandoned release line, although the package is mature and stable.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long absence of package releases, this raises maintenance and abandonment concerns.
There are 12 open pull requests and no pull requests merged in the last month, indicating limited current project throughput even though only one issue is open.
The repository has no detected build tools or security-scanning tools. For this small, dependency-free JavaScript utility this is a modest transparency and maintenance gap rather than a severe risk.
Both analyzed workflows lack top-level token-permission declarations. Neither grants top-level write access, but explicit least-privilege configuration would improve workflow hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.