Package Health

thenify

Promisify a callback-based function

Latest 3.3.1NPMNPM

44%

Total Score

unhealthy

Risky: no release or commit activity for about six years, suggesting the project is effectively abandoned.

Are you affected? Scan for Free

Health Score Breakdown

Release historydanger

The latest release was published about six years ago, with no releases in the last 12 months. Nine releases over a long history show prior maturity, but the current gap materially raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly six-year release gap. This is strong evidence that maintenance has stopped.

Repo issue activitycaution

There are two open issues and no issue or pull-request activity in the last month, providing additional evidence of limited current project attention.

Repo toolingcaution

The repository reports no build tooling or security scanning. For this small JavaScript package that is a hygiene gap, but it is secondary to the stronger maintenance evidence.

Security policycaution

No repository security policy is present, reducing transparency about vulnerability reporting and response. This is a genuine but moderate concern because the package is small and inactive.

Vulnerabilities

TitleVersionsSeverity
CVE-2020-7677
thenify is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 3.3.1.
0.0.0 - 3.3.1
Critical

Package versions

Direct Dependencies

DependencyLast ReleaseScore
any-promise
Version ^1.0.0
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
12 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform