Low level toolkit for SVG paths transformations.
66%
Total Score
83
100
90
90
The package has existed for 4738 days and has 26 releases, but it has had no registry release in the last 12 months and was last released nearly four years ago. This is a meaningful maintenance concern, partly offset by the repository being unarchived and pushed in March 2024.
There were no commits and no active maintainers in the last three months, indicating currently low maintenance activity. This reinforces the stale registry release history and lowers confidence in ongoing support.
The repository reports no build tools and no security scanning tools. For this small JavaScript package the lack of a build system is not concerning, but the absence of security scanning is a modest hygiene gap.
The only workflow lacks a top-level permissions declaration. No write permissions were observed, but explicitly restricting the token would provide stronger workflow hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.