Converts back a yargs argv object to its original array form
64%
Total Score
caution
Usable with caveats: no registry release in nearly six years, with recent repository work concentrated in one contributor.
The package has 15 releases, but none in the last 12 months and the latest registry release was in October 2020, nearly six years ago. Recent repository activity partly offsets abandonment concerns, but the registry release gap remains significant.
All 4 recent commits came from one contributor, creating a concentrated maintenance dependency. Organization backing provides some handoff capacity, but no second recent contributor is shown.
All 7 analyzed action references are unpinned, weakening build reproducibility, and the audit reports trusted publishing with a long-lived registry token. No untrusted checkout or script-injection paths were found, limiting the severity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flat Version ^5.0.2 | — | — |
camelcase Version ^6.0.0 | — | — |
decamelize Version ^4.0.0 | — | — |
is-plain-obj Version ^2.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.