Is pull-handshake safe to use?

pull-handshake has no known vulnerabilities on the latest version (1.1.4). DepScope rates its health at 49/100 (high risk).

What is the latest version of pull-handshake?

The latest version of pull-handshake is 1.1.4, released 2016-08-05.

Does pull-handshake have known vulnerabilities?

No known vulnerabilities on the latest version of pull-handshake.

Is pull-handshake deprecated?

No, pull-handshake is actively maintained. Latest release: 1.1.4 (2016-08-05).

What are alternatives to pull-handshake?

Popular alternatives to pull-handshake in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does pull-handshake use?

pull-handshake is licensed under MIT.

pull-handshake

npmv1.1.4

easily create a duplex protocol that starts with a handshake

License MITpermissive12 versions2 maintainers4 deps2,444 weekly dl

dominictarr/pull-handshake

/ 100

Health

use with caution

[email protected] low health (49/100) — consider alternatives

Moderate health score (49/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (4)

pull-cat pull-pair pull-pushable pull-reader

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/pull-handshake