jaytaph/typearray
It has a clear BSD-3-Clause license, a readable README, tests, and a small dependency footprint. The lone workflow uses unpinned actions and the project has no security policy, so build reproducibility and ongoing maintenance remain concerns.
60%
Total Score
50
86
50
Health Score Breakdown
The latest release was in June 2023, and there were no releases in the last 12 months despite the package being about 3 years and 9 months old. This indicates prolonged inactivity, although the package is not deprecated.
The repository had no commits and no active maintainers in the last 3 months, consistent with the long release gap. The repository is still available and not archived, but there is no recent maintenance evidence.
The linked repository has no security policy. For a small library this is a transparency gap, though it is partly offset by the repository being present and the package having a clear license and tests.
Version v0.0.5 is not on a stable major version, which limits maturity expectations. It is not marked as a prerelease, so this is a modest concern rather than a severe stability warning.
The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, or audit findings, but both analyzed action references are unpinned. That leaves build inputs less reproducible than they could be.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joshua Thijssen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/property-access Version ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.