retext plugin to implement SmartyPants
67%
Total Score
75
100
94
50
This is a mature package with 31 releases over more than 12 years, but it has had no registry release in almost two years and none in the last 12 months. That materially raises maintenance and abandonment concerns.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The package may be stable, but current maintenance capacity is not demonstrated.
Both workflows were analyzed successfully and the pull request trigger has no untrusted checkout or script-injection sink, but all four action references are unpinned. This is a build reproducibility and update-hygiene weakness rather than a severe workflow risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@types/nlcst Version ^2.0.0 | — | — |
nlcst-to-string Version ^4.0.0 | — | — |
unist-util-visit Version ^5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.