A library for dynamically streaming dynamic tar files without the need to have the complete file stored on the server.
67%
Total Score
67
100
93
83
The package has eight releases since 2015, but its latest registry release was on June 16, 2023, with no releases in the last 12 months. This is a meaningful maintenance concern despite the repository receiving a recent update.
All recent commits came from a single contributor, creating concentration risk. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe risk.
Only one commit from one active maintainer was recorded in the last three months. The recent activity is positive, but its low volume provides limited evidence of sustained maintenance.
The CI workflow does not declare top-level token permissions. Although no write permissions were observed, the absence of an explicit restrictive policy is a workflow-hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.