Package Health

ssr-window

Better handling for window object in SSR environment

Latest 5.0.1NPMNPM

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

92

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access, which increases release bus-factor risk. The linked repository is also owned by a single user, so no organizational backing is shown to compensate for that concentration.

Release historycaution

The package has 23 releases since 2018, but no releases in the last 12 months and the latest release was about 15 months ago. Its earlier release cadence shows maturity, but the current pause lowers maintenance confidence.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. This is a meaningful sign of currently limited maintenance capacity, despite the recent historical release.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 12 pull requests remain open. This suggests limited recent project activity and responsiveness.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, although the package's small scope and other available project documentation provide some compensating context.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10093 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
ssr-window is vulnerable to Prototype Pollution in versions 2.0.0-beta.1 - 4.0.2.
2.0.0-beta.1 - 4.0.2
High

Package versions

Maintainers

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 year ago
Created
8 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform