which-typed-array
Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.
82%
Total Score
75
100
67
50
Health Score Breakdown
The release has no attestation, although staged publishing and a named approver are present. The missing attestation weakens independently verifiable build transparency without making the release unfit.
The package uses prepack and prepublish lifecycle scripts, which add build-time execution during publication or installation workflows. No provided signal shows those scripts are unsafe, so this is a limited supply-chain hygiene concern.
No commits or active maintainers were recorded in the last three months. Recent registry releases partly compensate for this, but the lack of recent source activity warrants monitoring.
All 7 workflows were analyzed successfully with no reported audit findings or untrusted checkouts. However, all 7 action references are unpinned, leaving avoidable dependency-drift risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 gopd Version ^1.2.0 | — | — |
for-each Version ^0.3.5 | — | — |
call-bind Version ^1.0.9 | — | — |
get-proto Version ^1.0.1 | — | — |
call-bound Version ^1.0.4 | — | — |
Weekly Downloads
Info
- Last Published
- 23 days ago
- Created
- 11 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.