favicon serving middleware with caching
80%
Total Score
75
100
94
100
50
No build attestation or staged-publishing provenance was found, leaving publication origin less verifiable. This is a transparency limitation, but not severe enough to outweigh the repository and maintenance evidence.
The package has 22 releases over more than 12 years, but none in the last 12 months; the latest release was about 15 months ago. This indicates a maintenance lull, though the long history provides useful maturity evidence.
The repository recorded zero commits and zero active maintainers in the last three months. This is a recent maintenance lull, although the repository was pushed about 7 months ago and the project has a long release history.
There are no open issues and eight open pull requests, with no issues or pull requests opened or merged in the last month. The quiet tracker is consistent with a mature small project but offers limited evidence of current responsiveness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ms Version ~2.1.3 | — | — |
etag Version ~1.8.1 | — | — |
fresh Version ~0.5.2 | — | — |
parseurl Version ~1.3.2 | — | — |
safe-buffer Version ~5.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.