randomstring
The package is small, documented, tested, licensed, and has no install-time scripts or deprecation notice. Its maintenance capacity is limited, and the repository lacks security tooling and a security policy.
72%
Total Score
50
100
89
75
50
Health Score Breakdown
No build attestation or trusted-publisher identity is present. This weakens release transparency, although it is not by itself evidence that the release is unsafe.
Only one account, eliaskg, has registry publish access. This creates a thin publishing base and increases continuity risk if that maintainer becomes unavailable.
The package has existed for 5,366 days with 21 releases and one release in the last 12 months. The long history helps, but the low recent cadence limits evidence of active maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Although a release was published recently, this leaves current maintenance capacity uncertain.
Only two issues are open, with no issues or pull requests created or closed in the last month. The low activity is consistent with a small mature package but provides little evidence of responsive maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 randombytes Version 2.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 14 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.