Runs the following loaders in a worker pool
68%
Total Score
67
100
94
50
50
No build provenance attestation or trusted publisher is recorded, leaving publication origin less transparent than an attested release.
A prepare script runs during installation. This is not inherently unhealthy, but it adds install-time execution that consumers should account for.
The package has 27 releases over roughly nine years, but no releases in the last 12 months; this indicates a mature package with a currently quiet release cadence.
The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance concern, partly offset by the repository's recent push date and organization backing.
There were no new or closed issues or pull requests in the last month, although open issues and pull requests remain; this supports a picture of limited current activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neo-async Version ^2.6.2 | — | — |
schema-utils Version ^4.2.0 | — | — |
loader-runner Version ^4.1.0 | — | — |
json-parse-better-errors Version ^1.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.