shell-exec
A tiny cross-platform promise based wrapper around child_process.spawn.
70%
Total Score
50
100
94
67
50
Malware detected in 2 versions
Health Score Breakdown
No build attestation or trusted-publisher provenance was reported, reducing publication transparency, although the package has a clear source repository and build tooling.
Only one account has registry publish access, which creates a thin publishing base; this is partly offset by the repository showing recent releases but remains a continuity concern.
The repository is owned by an individual user rather than an organization, so the single-maintainer context represents a genuine continuity limitation.
The repository recorded zero commits and zero active maintainers in the last three months, indicating limited current development activity despite recent registry releases.
The repository uses TypeScript, tsup, and npm scripts for builds, but has no reported security scanning tools.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 9 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.