Parse String to Number based on configuration
87%
Total Score
healthy
Recent releases and organizational backing offset the risk of all recent commits coming from one contributor.
Only one registry account has publish access. That is a publishing concentration risk, although the repository's organization ownership provides some maintenance backing.
All three commits in the last three months came from one contributor, giving the project a concentrated recent commit base. Organization ownership partly offsets this, but no second active contributor is shown.
No type declarations are published. This is a minor consumer-ergonomics gap for a JavaScript library, not evidence of poor maintenance or abandonment.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-935934 strnum is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 0.0.1 - 2.4.1. | 0.0.1 - 2.4.1 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
anynum Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.