toSource converts JavaScript objects back to source
62%
Total Score
caution
Usable with caveats: no releases since 2021 and no commits in the measured three-month period.
The latest release was in July 2021, with no releases during the last 12 months; this indicates a substantial maintenance gap despite the package's long history and eight total releases.
The repository recorded zero commits and zero active maintainers in the measured three-month period, reinforcing the release-history concern about current maintenance.
There were no new or closed issues or pull requests in the measured month, so there is no evidence of active issue handling during that period.
The project uses TypeScript, Rollup, and npm scripts, but no security-scanning tooling was detected; this is a modest transparency and maintenance gap rather than a standalone severe risk.
Version 2.0.0-alpha.3 is explicitly a prerelease, so its API may still change and it is less suitable as an unpinned production dependency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.