Improved typeof detection for node.js and the browser.
64%
Total Score
67
100
89
50
A prepare install-time script is present, adding execution during installation; no supplied signal shows that it is unsafe, so this is a modest transparency concern rather than a severe risk.
The package has 18 releases since August 2013, but none in the last two years; the long history supports maturity while the current gap lowers maintenance confidence.
There were no commits or active maintainers in the last three months, consistent with roughly two years since the latest release and raising abandonment risk.
There were no new or closed issues or pull requests in the last month, indicating limited current project activity.
The repository uses TypeScript, Rollup, and npm scripts, showing a defined build process, but no security scanning tooling was detected.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.