Real saved report · no signup required
Moment
npm · moment
Health score /100
Very slow responsiveness
Daily monitoring ·
Upstream repository: moment/moment ↗Grades measure upstream repository maintenance health, not the security of a specific installed version. Security findings below concern the dependencies inspected in that repository; coverage may be incomplete.
Maintenance breakdown
Resolution
75/100Good issue resolution
Close rate: 83%.
No recent closures
No issues have been closed in the last 30 days.
Risk Flags
80/100Slowing development
Last commit was 1 month ago.
View evidence ↗Fairly recent release
Latest release (2.31.0) was 1 month ago.
View evidence ↗
Backlog Health
60/100Growing stale backlog
33% of open issues are stale.
View evidence ↗
Responsiveness
20/100Very slow responsiveness
Median open issue age is 42 days. Issues appear to be neglected.
View evidence ↗
Score history
| Scan completed (UTC) | Grade | Health score |
|---|---|---|
| F | 56.5 | |
| F | 56.5 | |
| D | 60.9 | |
| D | 60.9 | |
| D | 60.9 | |
| D | 60.9 | |
| D | 60.9 | |
| D | 60.9 | |
| D | 60.9 | |
| D | 60.9 | |
| F | 56.9 | |
| F | 46.9 | |
| F | 46.9 | |
| F | 46.9 | |
| F | 46.9 | |
| F | 46.9 | |
| F | 46.9 | |
| F | 46.9 | |
| F | 46.9 |
Security findings
rollup ^4.62.4
DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS
high · CVE-2024-47068
View advisory ↗Rollup 4 has Arbitrary File Write via Path Traversal
high · CVE-2026-27606
View advisory ↗
typescript3 npm:typescript@^3.9.10
Malicious code in typescript3 (npm)
unknown · GHSA-pppr-w653-m686
View advisory ↗
uglify-js ^3.19.3
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
critical · CVE-2015-8857
View advisory ↗Regular Expression Denial of Service in uglify-js
high · CVE-2015-8858
View advisory ↗
Healthier alternatives
- B date-fns/date-fns83.0
- B iamkun/dayjs82.1
- D moment/luxon65.9
We check this public collection daily. You can scan your own dependencies for free.