Package Health

unist-util-filter

unist utility to create a new tree with nodes that pass a filter

Latest 5.0.1NPMNPM

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

88

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Health Score Breakdown

Build provenancecaution

No build attestation or trusted-publisher provenance was provided, so publication cannot be independently tied to a verified build.

Release historycaution

The package has 15 releases since January 2016, but its latest release was about three years ago and it had no releases in the last 12 months, indicating limited ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months; together with the old latest release, this is evidence of dormant maintenance.

Repo toolingcaution

TypeScript and npm build tooling are present, supporting reproducible project maintenance, but no security scanning tools were detected, leaving a modest hygiene gap.

Workflow auditcaution

Both workflows were analyzed without audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all four action references are unpinned, reducing workflow reproducibility.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
@types/unist
Version ^3.0.0
—
—
unist-util-is
Version ^6.0.0
—
—
unist-util-visit-parents
Version ^6.0.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
10 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform