string-argv
It has a small, dependency-free footprint with clear documentation and TypeScript support. The source project remains maintained, though its single-user ownership and lack of security scanning leave modest transparency gaps.
82%
Total Score
67
100
94
88
50
Health Score Breakdown
No build attestation or trusted-publisher provenance was found, leaving publication origin less independently verifiable despite the otherwise transparent package contents.
The repository is owned by an individual rather than an organization, so the small maintainer base provides less visible continuity backing than an organization-owned project.
No commits or active maintainers were recorded in the last three months, which weakens direct evidence of sustained development; recent repository push and pull-request activity partly compensate.
TypeScript and npm build tooling are present, but no security scanning tools were detected, leaving a modest maintenance and transparency gap.
The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 12 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.