Package Health

source-map-loader

extracts inlined source map and offers it to webpack

Latest 5.0.0NPMNPM

18%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Using this package? Scan for Free

Health Score Breakdown

Release historydanger

The package has 29 releases over about 12 years, but its latest registry release was January 15, 2024 and there were no releases in the following 12 months of the collected history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the archived state and indicating no current maintenance capacity.

Repository archiveddanger

The linked repository is archived, which is a severe abandonment risk even though it was pushed in August 2025; archived status makes ongoing maintenance and fixes uncertain.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot independently verify how this release was built; the package is nevertheless licensed and documented.

Project backingcaution

The source repository is owned by the webpack-contrib organization, which provides organizational backing context; archived status and absent recent activity still indicate the project is not being maintained now.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
iconv-lite
Version ^0.6.3
—
—
source-map-js
Version ^1.0.2
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
12 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform