temporal-polyfill

A lightweight polyfill for Temporal, successor to the JavaScript Date object

Latest 1.0.6

78%

Total Score

healthy

Active releases and commits support this package, with a concentrated maintainer base and unpinned workflow actions as the main concerns.

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

One contributor made 85 of 89 recent commits, or about 96%, creating a meaningful continuity risk; the five active contributors and organization backing partly compensate.

Repo tooling

The project uses npm build scripts but reports no security scanning tools, leaving a transparency and maintenance-hygiene gap despite otherwise active development.

Security policy

No repository security policy is present, which weakens the project's documented process for handling security reports.

Workflow audit

The sole workflow was fully analyzed with no injection or high-severity findings, but all 3 action references are unpinned, reducing build reproducibility and update safety.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2024-10016 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. temporal-polyfill is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.0 - 0.2.1.	0.0.0 - 0.2.1	Medium