url-parse

Small footprint URL parser that works seamlessly across Node.js and browser environments

Latest 1.5.10

NPM

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has a long history with 51 releases, but none in the last 12 months; its latest release was over four years ago, making ongoing maintenance uncertain.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with an inactive project and increasing abandonment risk.

Repository archived

The linked repository is not archived, although its last push was over three years ago, so the non-archived status does not offset the maintenance slowdown by itself.

Type declarations

No type declarations are included, which adds integration friction for typed consumers of this JavaScript library.

Workflow audit

The workflow audit completed fully and found no dangerous triggers, untrusted checkouts, or injection sinks. However, all five action references are unpinned, leaving avoidable build-integrity risk.

Vulnerabilities

Title	Versions	Severity
CVE-2022-0691 url-parse is vulnerable to Authorization Bypass Through User-Controlled Key in versions 0.1.0 - 1.5.9.	0.1.0 - 1.5.9	Medium
CVE-2022-0686 url-parse is vulnerable to Authorization Bypass Through User-Controlled Key in versions 0.0.0 - 1.5.8.	0.0.0 - 1.5.8	Critical
CVE-2022-0639 url-parse is vulnerable to Authorization Bypass Through User-Controlled Key in versions 1.0.0 - 1.5.7.	1.0.0 - 1.5.7	Medium
CVE-2022-0512 url-parse is vulnerable to Authorization Bypass Through User-Controlled Key in versions 0.1.0 - 1.5.6.	0.1.0 - 1.5.6	Medium
CVE-2020-8124 url-parse is vulnerable to Improper Input Validation in versions 0.1.0 - 1.4.5.	0.1.0 - 1.4.5	Medium