Create a vinyl file from an actual file
68%
Total Score
67
100
83
90
The repository is owned by an individual rather than an organization, so the single registry maintainer reflects a narrow apparent maintainer base and limited institutional backing.
The package has 11 releases over roughly 12 years, but none in the last 12 months; the long gap since the December 2022 release lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing that maintenance has effectively stopped since the 2022 release.
The repository has one workflow but no build tool or security scanning tool, which is a modest transparency and maintenance gap for a package with a simple source tree.
The linked repository is not archived, although its last push was in December 2022, consistent with the maintenance gap shown elsewhere.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vinyl Version ^3.0.0 | — | — |
@types/vinyl Version ^2.0.7 | — | — |
strip-bom-buf Version ^3.0.1 | — | — |
strip-bom-stream Version ^5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.