@cyberhub/trust-event-stream 1.0.0 → 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +38 -8
- package/package.json +3 -4
package/README.md
CHANGED
|
@@ -1,21 +1,28 @@
|
|
|
1
1
|
# Security Trust Report: event-stream
|
|
2
2
|
|
|
3
|
-
**Score:
|
|
3
|
+
**Score: 54/100 | Grade: C | Tier: STANDARD** (confidence: ±3)
|
|
4
4
|
|
|
5
|
-
>
|
|
5
|
+
> ⚠️ Notable risk factors. Review flags and actions below.
|
|
6
6
|
|
|
7
7
|
## Score Breakdown
|
|
8
8
|
|
|
9
9
|
| Category | Score |
|
|
10
10
|
|----------|-------|
|
|
11
11
|
| Maintainer Trust | 44/100 |
|
|
12
|
-
| Package Health |
|
|
13
|
-
| Supply Chain |
|
|
12
|
+
| Package Health | 86/100 |
|
|
13
|
+
| Supply Chain | 39/100 |
|
|
14
14
|
| Community | 46/100 |
|
|
15
15
|
|
|
16
|
+
## Vulnerabilities
|
|
17
|
+
|
|
18
|
+
**1 vulnerabilities** (Critical: 1, High: 0, Medium: 0)
|
|
19
|
+
|
|
20
|
+
|
|
21
|
+
|
|
16
22
|
## Flags
|
|
17
23
|
|
|
18
24
|
- **CRITICAL**: HISTORICAL BREACH: Malicious code injected via flatmap-stream (2018)
|
|
25
|
+
- **CRITICAL**: 1 CRITICAL vulnerability(ies) from live CVE databases
|
|
19
26
|
- **HIGH**: Primary maintainer account is less than 6 months old (0 days)
|
|
20
27
|
- **HIGH**: Maintainer(s) removed in v4.0.0: dominictarr
|
|
21
28
|
- **HIGH**: Burst publishing detected — 5+ versions in a single day
|
|
@@ -25,11 +32,34 @@
|
|
|
25
32
|
- **MEDIUM**: Package dormant — last published 2742 days ago
|
|
26
33
|
- **MEDIUM**: No GitHub repo found — community signals unavailable
|
|
27
34
|
- **LOW**: Erratic publish cadence — highly irregular release intervals
|
|
35
|
+
- **INFO**: Published with 2FA enabled (signed)
|
|
36
|
+
|
|
37
|
+
## 🛠️ What Should You Do?
|
|
38
|
+
|
|
39
|
+
**Immediate actions:**
|
|
40
|
+
- ⛔ HISTORICAL BREACH: Malicious code injected via flatmap-stream (2018)
|
|
41
|
+
- ⛔ 1 CRITICAL vulnerability(ies) from live CVE databases
|
|
42
|
+
|
|
43
|
+
**Review:**
|
|
44
|
+
- 🟠 Primary maintainer account is less than 6 months old (0 days)
|
|
45
|
+
- 🟠 Maintainer(s) removed in v4.0.0: dominictarr
|
|
46
|
+
- 🟠 Burst publishing detected — 5+ versions in a single day
|
|
47
|
+
|
|
48
|
+
**Pin your version** and monitor for changes.
|
|
49
|
+
|
|
50
|
+
## 🔄 Alternatives
|
|
51
|
+
|
|
52
|
+
| Package | Why |
|
|
53
|
+
|---------|-----|
|
|
54
|
+
| [highland](https://nrupak.com/trust/highland) | High-level streams library |
|
|
55
|
+
| [Node.js streams](https://nrupak.com/trust/Node.js%20streams) | Built-in, no dependency needed |
|
|
56
|
+
| [through2](https://nrupak.com/trust/through2) | Simple stream wrapper |
|
|
57
|
+
|
|
58
|
+
## Maintainers
|
|
28
59
|
|
|
29
|
-
|
|
60
|
+
- npm ✅ 2FA
|
|
30
61
|
|
|
31
|
-
|
|
62
|
+
**Sources:** GitHub Advisories · OSV.dev · npm audit · Snyk · Socket.dev · npms.io · Bundlephobia · deps.dev
|
|
32
63
|
|
|
33
64
|
---
|
|
34
|
-
*
|
|
35
|
-
*[Dashboard](https://nrupak.com/trust) | [Compare](https://nrupak.com/trust/compare) | [CLI](https://npmjs.com/package/@cyberhub/pkgtrust)*
|
|
65
|
+
*[pkgtrust](https://nrupak.com/trust/event-stream) | [Compare](https://nrupak.com/trust/compare) | [CLI](https://npmjs.com/package/@cyberhub/pkgtrust) | Updated 2026-04-02*
|
package/package.json
CHANGED
|
@@ -1,15 +1,14 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cyberhub/trust-event-stream",
|
|
3
|
-
"version": "1.0.
|
|
4
|
-
"description": "Security Trust Report for event-stream —
|
|
3
|
+
"version": "1.0.1",
|
|
4
|
+
"description": "Security Trust Report for event-stream — 54/100 (C, standard). 8 security databases.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"event-stream",
|
|
7
7
|
"security",
|
|
8
8
|
"trust-score",
|
|
9
9
|
"vulnerability",
|
|
10
10
|
"pkgtrust",
|
|
11
|
-
"
|
|
12
|
-
"supply-chain-attack"
|
|
11
|
+
"CVE"
|
|
13
12
|
],
|
|
14
13
|
"license": "MIT",
|
|
15
14
|
"author": "Nrupak Shah",
|