Make a regular expression time out if it takes too long to execute
70%
Total Score
50
89
83
50
No build attestation or trusted-publisher provenance is present. This is a transparency gap, although it is not by itself evidence that the release is unsafe.
The repository is owned by an individual account rather than an organization, so there is no organizational backing to offset the thin recent contributor activity.
The package has five releases over about four years, with a median interval of roughly 318 days and one release in the last 12 months. This indicates slow maintenance, though a recent release shows the project is not abandoned.
The repository recorded zero commits and zero active maintainers in the last three months. The recent push and release provide some compensation, but current maintenance activity remains thin.
No build tool or security-scanning tool was detected in the repository. For a small package this is a moderate process gap rather than a severe maturity concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
time-span Version ^5.1.0 | — | — |
function-timeout Version ^1.0.1 | — | — |
make-asynchronous Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.