signedsource
This package exports utilities to sign and verify generated files.
42%
Total Score
100
67
100
50
Health Score Breakdown
The package has only three releases and no release in nearly seven years, which is a meaningful abandonment concern despite its long age.
No build attestation or trusted-publisher provenance is present, so the origin of the published artifact cannot be independently verified.
The published artifact has no README, leaving consumers without package-level usage guidance; absent tests and changelog files are normal for a published artifact and are not concerns here.
No type declarations are included, which reduces ergonomics and safety for consumers integrating this JavaScript library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 9 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.