Package Health

pstree.remy

It has no runtime dependencies, includes tests and a README, and is MIT-licensed. The repository is small and lacks security tooling, so plan for limited ongoing support.

Latest 1.1.8NPMNPM

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Health Score Breakdown

Release historydanger

The package has had no release in over six years, with zero releases in the last 12 months. Its nine-release history shows an established but inactive project, which raises abandonment risk.

Repo commit activitydanger

The repository has zero commits and zero active maintainers in the last three months, and its last push was in June 2020. This strongly limits evidence of ongoing maintenance.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less transparent. This is a meaningful transparency gap, though not severe on its own.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing shown to compensate for the single-publisher and inactive-project signals.

Repo toolingcaution

The repository reports no build tooling and no security scanning. For this small JavaScript package that is a modest hygiene gap, but it reduces confidence in ongoing project practices.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
6 years ago
Created
8 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform