An implementation of the WHATWG URL Standard's URL API and parsing machinery, without unicode support
32%
Total Score
33
61
50
The artifact overlap with whatwg-url is 1.0, while the package does not identify itself as a fork or lookalike; consumers may have intended the established whatwg-url package instead.
The latest release was in September 2021, with no releases in the last 12 months, indicating the package is likely abandoned for current consumers.
The repository had zero commits and zero active maintainers in the last three months, providing strong evidence that maintenance has stopped.
The package has a prepare script, which can run during installation or publishing and adds some supply-chain complexity, though this signal alone is not severe.
The repository is owned by an individual rather than an organization, so the single registry maintainer does not have organizational backing to compensate for the inactive project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
buffer Version ^5.4.3 | — | — |
punycode Version ^2.1.1 | — | — |
webidl-conversions Version ^5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.