the stream module from node core for browsers
60%
Total Score
67
100
83
100
50
No build attestation or staged publishing is present, so consumers receive no additional provenance evidence for the published artifact. This is a transparency gap, but not a severe risk on its own.
The package has 14 releases but none in the last 12 months, with the latest release on April 16, 2020. The repository was pushed more recently, which partly offsets the aging registry release.
The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, this weakens evidence of active maintenance.
There were no new or closed issues or pull requests in the last month, with only two open issues and four open pull requests. This adds to the evidence of limited recent project activity.
The repository reports no build tooling and no security scanning tools. The absence of security scanning is a maintenance and assurance gap, even for a small package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
inherits Version ~2.0.4 | — | — |
readable-stream Version ^3.5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.