Base stream implementations for winston@3 and up.
64%
Total Score
67
100
94
75
This mature package has 25 releases, but none in the last 12 months and its latest registry release was in November 2024. That sustained release gap is a meaningful maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months. The recent push noted by repository status partially offsets abandonment risk, but does not show sustained development.
There were no new or closed issues or pull requests in the last month, leaving current responsiveness uncertain rather than demonstrating active maintenance.
The repository has no security policy. This is a transparency gap for reporting vulnerabilities, although other repository tooling provides some security support.
The single workflow was fully analyzed with no untrusted checkouts, injection findings, or high-severity issues. However, both action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
logform Version ^2.7.0 | — | — |
triple-beam Version ^1.3.0 | — | — |
readable-stream Version ^3.6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.