@a2ui/web_core

A2UI Core Library

Latest 0.15.0

NPMApache-2.0

86%

Total Score

healthy

22 releases, 672 recent commits, and 34 active contributors support this release, with no deprecation or workflow audit findings.

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

The release has no build attestation, trusted publisher identity, or staged publishing record.

License

The manifest declares Apache-2.0 and the artifact contains one LICENSE file, but that file was detected as Apache-2.0 and MIT.

Repo tooling

The repository uses npm scripts and TypeScript but reports no security scanning tools.

Security policy

The repository has no SECURITY.md file or other detected security policy.

Version stability

Version 0.15.0 is not on a stable major version, but it is not a prerelease and only 25% of recent releases were prereleases.

Title	Versions	Severity
AIKIDO-2026-619367 @a2ui/web_core is vulnerable to Cross-Site Scripting (XSS) in versions 0.9.0 - 0.10.1.	0.9.0 - 0.10.1	Critical

Version	Published	Vulnerabilities
0.15.0	2 Nov 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.14.0	17 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.13.0	9 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.12.0	28 Sept 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.11.0	12 Sept 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.10.7	1 Sept 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.10.6	3 Aug 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.10.5	17 Jul 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.10.4	8 Jul 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.10.3	22 Jun 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total