ES2019 spec-compliant String.prototype.trimLeft shim.
68%
Total Score
67
100
94
75
A prepublish lifecycle script is present. This is an install or publication hygiene consideration, but the provided signal does not show that it performs risky installation-time behavior.
The package has seven releases since July 2015 but none in the last five years, indicating a long period without registry updates. The stable, mature package profile partly offsets this, but release freshness remains a concern.
No commits or active maintainers were recorded in the last three months. The recent repository push partly compensates, but the absence of observed commit activity still limits confidence in ongoing development.
There are no open issues or pull requests, and no recent issue or pull-request activity. This may reflect a mature, quiet shim, but it offers little evidence of active maintenance by itself.
All five workflows were analyzed successfully and no audit findings or untrusted checkouts were reported. However, all five action references are unpinned, reducing reproducibility and increasing workflow supply-chain exposure; pull_request_target triggers are not concerning without a reported sink.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
call-bind Version ^1.0.0 | — | — |
define-properties Version ^1.1.3 | — | — |
string.prototype.trimstart Version ^1.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.