find undeclared identifiers and property accesses in a javascript file.
68%
Total Score
50
50
89
80
Five runtime dependencies are declared for this small JavaScript utility. This is a meaningful dependency surface but not unusually large for the package's functionality.
The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational maintenance buffer. The matching repository and package references still support project ownership.
Only five releases are recorded, and the latest registry release was over seven years ago with no releases in the last 12 months. This is the main maintenance concern, although the package has a long enough history to be established.
There were no commits and no active maintainers in the past three months, which weakens evidence of ongoing maintenance; the recent repository push provides only limited compensation.
The repository has four stars and three forks, indicating a small user and contributor footprint. Low popularity alone is not disqualifying for a focused utility, but it provides little external maintenance support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
xtend Version ^4.0.1 | — | — |
dash-ast Version ^1.0.0 | — | — |
acorn-node Version ^1.3.0 | — | — |
simple-concat Version ^1.0.0 | — | — |
get-assigned-identifiers Version ^1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.