Reads and caches the entire contents of a file until it is modified
78%
Total Score
70
88
88
100
Only one registry publishing account is listed, which creates limited publishing redundancy; repository ownership and activity provide some compensation but do not remove the concentration.
The repository is owned by an individual rather than an organization, so the concentrated maintainer activity is not backed by an evident team handoff structure.
All eight recent commits came from one contributor, creating a meaningful continuity risk; the repository is user-owned, so no organizational handoff evidence compensates for it.
No build tool or security scanning tool is detected, a modest process-transparency gap for a package that otherwise has CI and release workflows.
No type declarations are included, which reduces convenience for TypeScript consumers, though the README documents the small JavaScript API clearly.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.