A simple and composable way to validate data in JavaScript (and TypeScript).
64%
Total Score
50
100
95
75
The repository is owned by an individual rather than an organization. This does not prove weakness, but it means the project has less visible institutional backing to offset a thin maintenance picture.
The package has existed for about 9 years with 90 releases, but its latest registry release was about 2 years ago and there were no releases in the last 12 months. This is meaningful evidence of slowing maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the older latest release, this points to a real maintenance slowdown.
There were no new or closed issues and no new or merged pull requests in the last month, alongside 82 open issues and 22 open pull requests. This indicates limited recent project activity.
The repository has no security policy. For a library intended to validate potentially arbitrary input, this reduces vulnerability-reporting transparency, though it is a hygiene concern rather than a standalone adoption blocker.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.