diff with unified diff format handling
58%
Total Score
caution
Usable with caveats: maintenance stopped for over three years and the license metadata conflicts with the artifact.
There were zero commits and zero active maintainers in the last three months, consistent with the release history showing that maintenance has stopped for over three years.
No build attestation or trusted-publisher provenance is present, reducing publication transparency, though this is a supporting concern rather than evidence of abandonment.
The artifact contains an ISC license file while the manifest declares MIT, so the release is licensed but its licensing metadata is inconsistent and should be verified.
Only one registry maintainer is listed, leaving a thin publishing and continuity base; the linked repository is also owned by a user rather than an organization.
The package has eight releases since June 2016, but none in the last 12 months and the latest release was over three years ago, indicating limited current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
diff Version ^5.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.