Promisify a callback-based function
44%
Total Score
unhealthy
Risky: no release or commit activity for about six years, suggesting the project is effectively abandoned.
The latest release was published about six years ago, with no releases in the last 12 months. Nine releases over a long history show prior maturity, but the current gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly six-year release gap. This is strong evidence that maintenance has stopped.
There are two open issues and no issue or pull-request activity in the last month, providing additional evidence of limited current project attention.
The repository reports no build tooling or security scanning. For this small JavaScript package that is a hygiene gap, but it is secondary to the stronger maintenance evidence.
No repository security policy is present, reducing transparency about vulnerability reporting and response. This is a genuine but moderate concern because the package is small and inactive.
| Title | Versions | Severity |
|---|---|---|
CVE-2020-7677 thenify is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 3.3.1. | 0.0.0 - 3.3.1 | Critical |
| Dependency | Last Release | Score |
|---|---|---|
any-promise Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.