vinyl-sourcemap
The gulpjs organization backs the repository, and its README, tests, license, and release notes are present. All seven workflow action references are unpinned, adding avoidable build reproducibility risk.
62%
Total Score
75
90
75
Health Score Breakdown
The package has had no registry release since October 2022, nearly four years before this assessment, which is a meaningful sign of slowing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current development activity.
All seven analyzed action references are unpinned, reducing build reproducibility; however, the audit found no untrusted checkouts, script injection, or other material workflow findings.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vinyl Version ^3.0.0 | — | — |
streamx Version ^2.12.5 | — | — |
graceful-fs Version ^4.2.10 | — | — |
now-and-later Version ^3.0.0 | — | — |
vinyl-contents Version ^2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 9 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.