100OUT OF 100
TrustedHigh trustStatic read

sindresorhus/p-limit

The repository is a well-known, highly established utility by a trusted maintainer. Static analysis confirms no malicious patterns, network activity, or obfuscation. The code aligns perfectly with its documented purpose as a concurrency limiter.

Repository size
56 KB
Packages
0
Stars
2925
Created
16 yr 9 mo
Reputation signals
sindresorhus avatar
Sindre Sorhus
@sindresorhus
Account age16 yr 9 mo
Public repos1.1K
Forks134
Community sentiment100

Excellent

Code & behavior signals
No risky items found

No signatures, install hooks, obfuscation, or embedded secrets were found in the code.

Per-package scoring
Final verdict

No malicious behavior in our static read, and reputation is strong. Runtime was not executed in a sandbox on this pass, so this is a static-read clearance, not a guarantee.

What we could not verify
—Full runtime behavior (this repo was not executed in a sandbox on this pass)
—Every conditional and time-triggered branch
—Behavior under real credentials (no sandbox was run on this pass)
End-to-end logs
Clone
›Repository cloned successfully.
›Commit hash: 783068bb9e967fd7bea8642e1bf5a3627fe38bdf
Static scan
›No flagged regions identified.
›No obfuscation, credential access, or network calls detected.
Reputation
›Owner is a highly established member of the open-source community.
›High star count and long account history indicate strong community trust.
Read
›README intent matches the code structure.
›No malicious behavior observed in our static read; full runtime behavior was not executed in a sandbox on this pass.
Score
›Score computed by formula: 100/100 (deterministic, code-driven)
›+8 [reputation] established_owner: Owner account is established (older than a year with multiple public repos).
›+6 [reputation] many_stars: Strong community signal (2,925 stars).
›+4 [reputation] good_sentiment: Positive community sentiment (100/100).
Auto-published at clauderabbit.in/sindresorhus/p-limit · re-checked when the repo changes