Starts server, waits for URL, then runs test command; when the tests end, shuts down server
78%
Total Score
healthy
Frequent releases and fresh repository activity support the package, while all recent commits come from one contributor.
The package uses a prepare install-time lifecycle script, which adds execution during installation and warrants attention, although this signal alone does not indicate an unsafe release.
Only one registry account has publish access, creating publishing concentration, though this is partly offset by the package's long release history and current repository activity.
The repository is owned by an individual user rather than an organization, so the concentrated recent activity has no organizational handoff evidence to offset it.
All four recent commits came from one contributor, with a 100% top-contributor share; the single-person concentration raises continuity risk for an individually owned project.
The repository recorded four commits in the last three months, so activity has not stopped, but only one active maintainer made them.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
arg Version 5.0.2 | — | — |
debug Version 4.4.3 | — | — |
execa Version 5.1.1 | — | — |
wait-on Version 9.5.1 | — | — |
lazy-ass Version 2.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.