yauzl-promise
Unzip library for NodeJS
62%
Total Score
caution
Usable with caveats: the latest release is over three years old and recent repository activity is absent.
Health Score Breakdown
The repository is owned by an individual account rather than an organization, so the single registry maintainer represents a thin project backing structure.
The package has 11 releases but none in the last three years, with the latest published in May 2023. This is a meaningful maintenance concern, though the repository was pushed more recently.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the concern about slowed maintenance.
There were no new or closed issues or pull requests in the last month, while 12 issues and 8 pull requests remain open. This suggests limited recent project response.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is not severe on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 is-it-type Version ^5.1.2 | — | — |
@node-rs/crc32 Version ^1.7.0 | — | — |
simple-invariant Version ^2.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 8 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.