swrv
72%
Total Score
83
100
90
75
50
No registry build attestation or trusted-publisher provenance was found. This is a transparency limitation, but the package has a matching, organizationally backed source repository and current release activity.
The project has existed for over six years with 69 releases and a release as recent as the scan date, but only two releases occurred in the last 12 months, indicating a slower recent cadence.
No commits and no active maintainers were recorded in the last three months. Recent pull-request merges and a current release partly compensate, but this still raises concern about direct maintenance continuity.
The repository uses established build tooling and produces TypeScript and Babel builds, but no security-scanning tools were detected.
No security policy was found in the repository, leaving vulnerability reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.