which
Healthy and reasonable to depend on. It has a long release history, current releases with documented changes, npm provenance, an organization-backed repository, and strong project hygiene. Recent repository activity is limited to one contributor, so maintenance concentration is the main caveat.
82%
Total Score
75
100
100
90
100
Health Score Breakdown
All recent repository commits came from one contributor, creating a concentrated short-term maintenance path. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe risk.
Only 1 commit was recorded in the last 3 months, which indicates limited recent development activity. The recent release and current repository state partly compensate, but this remains a maintenance concern.
All workflows declare permissions explicitly, although 4 release-related workflows request top-level write access. The explicit declarations and organization-backed release automation make this acceptable, but the write scope is worth reviewing.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 isexe Version ^4.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 15 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.