sequelize-pool
MIT licensing, bundled TypeScript declarations, clear documentation, and no runtime dependencies make integration straightforward. Maintenance appears slower, so pin this release and expect fewer timely fixes.
65%
Total Score
67
100
89
67
50
Health Score Breakdown
No build attestation or trusted-publisher provenance is present, so consumers cannot verify how the published artifact was produced; the otherwise small, dependency-free artifact limits the practical impact.
The package has existed for about 8 years with 17 releases, but it has had no release in the last 12 months; that weakens evidence of active maintenance while remaining consistent with a mature stable package.
There were zero commits and zero active maintainers in the last 3 months, which is a concrete sign that maintenance has slowed.
There were no new or closed issues or pull requests in the last month, with seven issues open; this indicates limited current project activity but is not by itself evidence of abandonment.
The project uses TypeScript and npm build tooling, but no security scanning tools were detected; the missing scanning is a modest repository hygiene gap rather than a health verdict.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 7 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.