secure-compare
Securely compare two strings, copied from cryptiles
52%
Total Score
caution
Usable with caveats: no release since 2015 and no recent repository activity make maintenance uncertain.
Health Score Breakdown
The latest release was published about 11 years ago, with no releases in the last 12 months. That long publishing gap materially raises abandonment and compatibility risk.
The repository recorded no commits or active maintainers in the last 3 months, and its last push was about 8 years ago. This confirms that the old release history reflects inactive maintenance.
The repository reports no build tooling and no security scanning. For a small dependency this is a hygiene gap rather than a severe risk, but it weakens maintenance transparency.
No security policy is present in the linked repository. That leaves vulnerability-reporting expectations unclear, although the package's small surface and zero runtime dependencies partly reduce the concern.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2015-9238 secure-compare is vulnerable to Incorrect Comparison in versions 0.0.0 - 3.0.1. | 0.0.0 - 3.0.1 | Medium |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.