Streaming Boyer-Moore-Horspool searching for node.js
61%
Total Score
caution
Usable with caveats: release and commit activity has stopped, despite a maintained-looking repository and minimal dependency footprint.
The package has had no registry release in more than four years, with no releases in the last 12 months. Its long history and seven total releases show maturity, but the prolonged release gap lowers maintenance confidence.
The repository had zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the repository was pushed in October 2023.
The repository uses no build tooling and has no detected security-scanning tooling. The small eight-file package may not need a build system, but the lack of security scanning is a transparency and maintenance gap.
The package provides no type declarations, which makes integration less convenient for TypeScript consumers. This is a consumer-ergonomics gap rather than evidence of abandonment.
Both workflows were analyzed successfully with no dangerous triggers, injection sinks, or audit findings. However, all four action references are unpinned, leaving workflow dependencies less reproducible.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.