streaming unbzip2 implementation in pure javascript for node and browsers
58%
Total Score
caution
Usable with caveats: no registry release since May 2020 and no recent repository commits.
The package has 26 releases since January 2015, but its latest registry release was in May 2020 and it had no releases in the last 12 months, indicating materially stale maintenance.
The release has no build attestation or trusted-publisher provenance, so consumers cannot independently verify how the published artifact was produced.
Only one registry publishing account is listed, which leaves release continuity dependent on a single person; the linked repository is user-owned rather than organization-backed.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the absence of current development activity.
There were no new or closed issues or pull requests in the last month, while 5 issues and 5 pull requests remain open; this suggests limited ongoing issue handling.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
buffer Version ^5.2.1 | — | — |
through Version ^2.3.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.