Like a JavaScript Set, but with a TTL on entries
58%
Total Score
50
100
79
75
The registry lists one publisher account. That is a limited operational backup for a user-owned project and modestly increases continuity risk, although repository ownership matches that account.
The repository is owned by an individual user rather than an organization. This is consistent with the single-maintainer picture and provides no evidence of broader project backing.
Only one release exists, published about 22 months ago, with no releases in the last 12 months. This may reflect a stable small package, but it provides little evidence of ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. For a package released only once, this is consistent with possible stability, but it leaves maintenance responsiveness unproven.
The repository reports no build tools or security scanning tools. The package is small and ships a simple JavaScript file, so the missing build layer is expected, but the lack of security scanning is a transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fast-fifo Version ^1.3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.