A node module for Google's Universal Analytics tracking
66%
Total Score
67
100
83
75
50
No build attestation, trusted publisher, or staged publishing is present, limiting release transparency and reproducibility evidence.
Only one registry account has publish access. This is a thin publishing base, although the repository is owned by an organization, which provides some backing.
The package has existed for 4967 days and has 45 releases, but only one release in the last 12 months; this suggests a slower maintenance cadence despite the recent latest release.
The repository had zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, even though the repository was recently pushed and the registry recorded a release.
The project uses make, but no security scanning tools were detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
uuid Version ^14.0.0 | — | — |
debug Version ^4.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.