strtok3
A promise based streaming tokenizer
80%
Total Score
healthy
Frequent releases and an active repository support this release, despite single-contributor maintenance and unpinned workflow actions.
Health Score Breakdown
No build attestation or trusted-publisher identity is present, so consumers have limited registry evidence connecting this artifact to its source build.
The repository is owned by an individual rather than an organization, so the single-maintainer concentration carries more weight than it would for an organization-backed project.
One contributor made 100% of recent commits, creating a meaningful continuity risk for a user-owned project without organizational backing.
Six commits were made in the last 3 months, but all came from one active maintainer; the recent activity is positive while the contributor base is narrow.
The repository has no published security policy, leaving vulnerability-reporting expectations less clear even though automated scanning is configured.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @tokenizer/token Version ^0.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 hours ago
- Created
- 9 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.