Perform async work synchronously in Node.js using `worker_threads` with first-class TypeScript support.
80%
Total Score
healthy
Recent releases and active repository support a healthy package, despite all recent commits coming from one contributor.
All 7 recent commits came from one contributor, creating a real continuity risk. The organization-owned repository provides some capacity to hand off maintenance, so this is caution rather than danger.
All six workflows were analyzed with no untrusted checkouts or script injection, and all 19 action references are pinned. The audit also reports high-severity but low-confidence cache findings plus high-confidence adhoc package installation and trusted-publishing findings, so workflow hygiene warrants caution.
| Dependency | Last Release | Score |
|---|---|---|
@pkgr/core Version ^0.3.6 | — | — |
@dual-bundle/import-meta-resolve Version ^4.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.