stdout-update
Updates the previous output in the terminal. Useful for correct rendering progress bars, animations, etc.
61%
Total Score
50
100
94
67
100
Health Score Breakdown
The package uses a prepare lifecycle script. This is not inherently unsafe, but it adds install-time behavior that deserves review when dependency maintenance is already inactive.
The repository is owned by an individual rather than an organization, so the single registry maintainer reflects a genuinely thin apparent backing rather than normal organization publishing hygiene.
The package has 38 releases and a historically regular median interval of about 9 days, but its latest registry release was over 2 years ago and there were no releases in the last 12 months.
There were no commits and no active maintainers in the last 3 months, consistent with a project whose latest repository push was nearly 2 years ago; this materially raises abandonment risk.
All 23 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in auto-merge; the low-confidence cache finding is only hygiene. No untrusted checkout or script injection was detected, so this is a caution rather than a severe workflow verdict.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 strip-ansi Version ^7.1.0 | — | — |
ansi-styles Version ^6.2.1 | — | — |
ansi-escapes Version ^6.2.0 | — | — |
string-width Version ^7.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 7 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.