A performant and standard (Bluebird) library that registers a node-style callback on a promise
62%
Total Score
75
100
83
67
The package has only six releases and none in the last 12 months; its latest release was in March 2021, more than five years ago. This materially raises maintenance and abandonment concerns despite the package's age.
There were no commits and no active maintainers in the last three months. Combined with the long gap since the latest release, this indicates a thin current maintenance signal.
The repository name does not match the package name and its README does not mention the package, so the link may not clearly establish that this is the package's dedicated source repository.
The repository uses TypeScript and npm build tooling, showing a defined build process, but it has no security scanning tools. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy, leaving vulnerability reporting expectations unclear. This lowers transparency but is less significant for this small, dependency-free utility.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.