read-pkg
Read a package.json file
78%
Total Score
50
94
83
Health Score Breakdown
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a modest maintenance concern, although the recent release history provides some compensation.
No build tool or security scanning tool was detected in the repository. For this small package, that is a transparency and hygiene gap rather than evidence of abandonment.
The single workflow was fully analyzed with no audit findings or untrusted checkout and injection patterns. However, both of its 2 action references are unpinned, leaving dependency versions less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 type-fest Version ^5.4.4 | — | — |
parse-json Version ^8.3.0 | — | — |
unicorn-magic Version ^0.4.0 | — | — |
normalize-package-data Version ^8.0.0 | — | — |
@types/normalize-package-data Version ^2.4.4 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 11 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.