tinyrainbow
All recent commits come from one contributor, but the organization-owned project provides some maintenance continuity. Type declarations, repository tests, signed npm provenance, and a clear README further support adoption.
86%
Total Score
83
100
67
100
Health Score Breakdown
All six recent commits came from one contributor, creating a real continuity risk; organization ownership provides some ability to hand maintenance off.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.
All workflows were analyzed, actions are fully pinned, and no untrusted checkout or script-injection paths were found. High-confidence findings report ad hoc package installation in the release workflow, which is a modest supply-chain hygiene concern; the low-confidence cache findings are not independently concerning.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 3 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.