Vendored dependencies for Victory
60%
Total Score
67
83
75
100
The artifact and repository contain license files, but the detected ISC and BSD-3-Clause licenses do not fully match the manifest declaration of MIT AND ISC.
The package has 48 releases and a median interval of about 8 days, but no releases in the last 12 months; the latest release was about 20 months before collection.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing concern about current maintenance momentum.
There were no new or closed issues and no merged pull requests in the last month, indicating little recent operational activity.
The repository name does not match this package and its README does not mention victory-vendor, so the package-to-repository link is less transparent; the monorepo context partly explains the name mismatch.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
d3-ease Version ^3.0.1 | — | — |
d3-time Version ^3.0.0 | — | — |
d3-array Version ^3.1.6 | — | — |
d3-scale Version ^4.0.2 | — | — |
d3-shape Version ^3.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.