TypeScript's largest utility library
58%
Total Score
50
100
85
100
50
The package has 929 releases but none in the last 12 months, and its latest release was published in March 2021. This long release gap materially raises abandonment and stale-dependency risk.
No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable. This is a transparency gap, but not severe enough to outweigh the repository and package evidence.
The repository is owned by an individual account rather than an organization, so there is no organizational backing shown to offset the thin current maintenance activity.
There were no commits and no active maintainers in the measured three-month period. The recent repository push provides some counterweight, but current development activity remains unproven.
The repository has 66 open issues and 18 open pull requests, but no new or closed issues or pull requests in the last month. This supports the concern that active maintenance is limited.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.