Strip comments and string literals from JavaScript code
85%
Total Score
63
100
94
67
100
Only one registry account has publish access, which creates publishing concentration, although repository activity shows another recent contributor.
The repository is owned by an individual rather than an organization, so the concentrated maintainer and publishing base is not offset by organizational handoff capacity.
One contributor made 80% of recent commits, but a second contributor supplied the remaining 20%, so the concentration is a moderate resilience concern rather than a severe abandonment signal.
The repository uses TypeScript, npm scripts, and a build tool, showing a defined build process; no security scanning tools were detected.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
js-tokens Version ^10.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.