worker-factory
A little factory function to create a JSON-RPC based Web Worker implementation.
78%
Total Score
healthy
Healthy overall: regular releases and recent repository activity outweigh single-maintainer and workflow concerns.
Health Score Breakdown
The package runs a prepare script during installation or preparation. This is not inherently unsafe, but it adds build behavior that consumers should account for.
All 31 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.
The project uses Rollup, TypeScript, npm scripts, and Babel, showing a structured build process, but no security-scanning tools were detected.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
The sole workflow was fully analyzed without dangerous triggers or untrusted checkouts, but all three action references are unpinned and it installs a package outside a lockfile; these are build-reproducibility and workflow-hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.8.1 | — | — |
@babel/runtime Version ^7.29.7 | — | — |
fast-unique-numbers Version ^9.0.27 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 8 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.