unenv
`unenv` is a framework-agnostic system that allows converting JavaScript code to be platform agnostic and work in any environment including Browsers, Workers, Node.js, or JavaScript runtime.
67%
Total Score
75
100
95
50
50
Health Score Breakdown
No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable. This is a transparency gap rather than evidence of unsafe code.
The repository recorded zero commits and zero active maintainers in the last three months. The recent push and release history provide some context, but the current pause still raises maintenance risk.
There was one new issue and three new pull requests in the last month, but none of the pull requests were merged, suggesting limited recent throughput.
The project uses established build tooling, but no security-scanning tools were detected, leaving a modest security-process gap.
The repository has no security policy, so users have no documented security reporting or response process.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 defu Version ^6.1.4 | — | — |
mime Version ^3.0.0 | — | — |
pathe Version ^1.1.2 | — | — |
consola Version ^3.2.3 | — | — |
node-fetch-native Version ^1.6.4 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 5 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.