quote and unquote strings. escapes internal quotes and slashes. Automatically decides whether to use single or double quotes.
52%
Total Score
50
85
75
A prepublish lifecycle script is present, adding release-time execution complexity. It is not evidence of malicious behavior by itself, but it warrants review before depending on an old package with no recent maintenance.
Only one registry publishing account is listed, leaving limited visible publishing capacity. This is partly consistent with a small personal utility, but it increases continuity risk if that maintainer becomes unavailable.
The package has only one release, published over 11 years ago, with no releases in the last 12 months. That makes current maintenance and compatibility uncertain despite the package's long age.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long period without releases. The repository is not archived, but there is no observed evidence of ongoing maintenance.
The repository has only 2 stars and 1 fork, indicating limited adoption evidence. Popularity is supporting evidence rather than a verdict, so this modestly reinforces the maintenance concern without independently making the package unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.