A lightweight JavaScript library that matches paths against registered routes.
58%
Total Score
50
100
89
63
50
There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is a meaningful maintenance and abandonment concern.
No build attestation, trusted publisher, or staged publishing is reported. This limits publication transparency, though it is not by itself evidence that the release is unsafe.
A prepublish lifecycle script is present. This is not inherently unsafe, but it adds build-time behavior that consumers should understand when reproducing or republishing the package.
The package has 28 releases since February 2014, but its latest release was in July 2018 and it had no releases in the last 12 months. That long release gap raises maintenance and abandonment concerns.
The repository has 10 open issues and 9 open pull requests, but no new or closed issues or pull requests in the last month. This supports the broader picture of limited recent activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.