{"package":"@things-factory/attachment-base","ecosystem":"npm","latest_version":"10.0.0-beta.67","description":"Server-side module for handling upload attachment. S3 Bucket and local folder attachment.","license":"MIT","license_risk":"permissive","commercial_use_notes":"Permissive: commercial closed-source use OK; preserve the copyright notice.","homepage":"","repository":"https://github.com/hatiolab/things-factory","downloads_weekly":null,"health":{"score":70,"risk":"moderate","breakdown":{"maintenance":25,"popularity":0,"security":25,"maturity":15,"community":5},"deprecated":false,"max_score":100},"vulnerabilities":{"count":0,"critical":0,"high":0,"medium":0,"low":0,"details":[]},"versions":{"latest":"10.0.0-beta.67","total_count":1007,"recent":["10.0.0-beta.10","10.0.0-beta.16","10.0.0-beta.19","10.0.0-beta.21","9.2.13","10.0.0-beta.28","9.2.16","6.4.8","6.4.10","8.0.87","8.0.88","9.2.17","10.0.0-beta.35","10.0.0-beta.44","4.3.815","10.0.0-beta.53","10.0.0-beta.57","10.0.0-beta.61","9.2.19","10.0.0-beta.67"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":8,"first_published":"2019-08-13T08:35:06.486Z","last_published":"2026-04-30T15:00:43.352Z","dependencies_count":11,"dependencies":["@aws-sdk/client-s3","@aws-sdk/lib-storage","@aws-sdk/s3-presigned-post","@azure/storage-blob","@koa/multer","@things-factory/auth-base","@things-factory/env","@things-factory/shell","mime","multer","sharp"]},"github_stats":null,"bundle":null,"typescript":{"score":0,"has_types":false,"types_source":null,"types_package":null},"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"safe_to_use","issues":[],"use_version":"10.0.0-beta.67","version_hint":null,"summary":"@things-factory/attachment-base@10.0.0-beta.67 is safe to use (health: 70/100)"},"version_scoped":null,"requested_version":null,"_cache":"miss","_response_ms":1136,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false,"advisory_id":"MAL-2025-47282","summary":"Malicious code in @things-factory/attachment-base (npm)","action":"use_with_caution","affected_versions":["9.0.43","9.0.44","9.0.45","9.0.46","9.0.47","9.0.48","9.0.49","9.0.50","9.0.55","9.0.54","9.0.53","9.0.52","9.0.51","9.0.42"],"latest_version_safe":true,"note":"Advisory MAL-2025-47282: versions 9.0.43, 9.0.44, 9.0.45, 9.0.46, 9.0.47, 9.0.48, 9.0.49, 9.0.50, 9.0.55, 9.0.54, 9.0.53, 9.0.52, 9.0.51, 9.0.42 are compromised. Current latest (10.0.0-beta.67) is safe."},"scorecard":{"available":false},"quality":{"available":false},"version_history_summary":{"total_versions":20,"first_release_age_days":2453,"last_release_days_ago":1,"avg_days_between_releases":129,"release_velocity":"active"}}