Utility to wait for a TCP port to open.
78%
Total Score
83
100
89
67
The repository is owned by an individual account, so the small maintainer and contributor base has no demonstrated organizational handoff capacity.
The latest registry release was about 3 years ago, with no releases in the last 12 months. Recent repository commits partly compensate, but the release gap still lowers confidence in delivery cadence.
The repository uses a build tool, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe concern.
No repository security policy was found, leaving vulnerability-reporting expectations undocumented.
Both workflows were analyzed without untrusted checkouts or script injection, but all 8 action references are unpinned and the release workflow uses long-lived registry credentials. These are actionable workflow-hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
chalk Version ^4.1.2 | — | — |
debug Version ^4.3.4 | — | — |
commander Version ^9.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.