Bash grammar for tree-sitter
72%
Total Score
67
100
94
70
An install script is present, which adds operational complexity because installation may execute package-provided setup logic, although native prebuilds and the documented build structure provide context for why installation work may be needed.
The package has existed since 2017 with 42 releases, but only one release was published in the last 12 months. That is a meaningful sign of slower maintenance, partly offset by the long release history.
There were zero commits and zero active maintainers in the last three months. This is the strongest maintenance concern, although the repository's recent push timestamp and long release history provide some counterevidence.
The repository still receives some issues and pull requests, but none were closed or merged in the last month, suggesting limited recent resolution capacity.
No security policy was found, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it does not by itself make the package unfit to use.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
node-addon-api Version ^8.2.1 | — | — |
node-gyp-build Version ^4.8.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.