@ag-ui/client
Client SDK for connecting to **Agent-User Interaction (AG-UI) Protocol** servers.
88%
Total Score
healthy
Active organization-backed project with strong release activity; a few workflow hygiene findings keep it below the top tier.
Health Score Breakdown
No security policy was found, which is a transparency gap for reporting vulnerabilities, though active maintenance and CodeQL scanning provide partial compensation.
All 28 workflows were analyzed and all 203 action references are pinned, with read-only permissions in 27 workflows. The audit still found a high-confidence archived action, an ad hoc package install, and trusted-publishing usage, so workflow hygiene is not perfect.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-62489 New @ag-ui/client is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 0.0.59. | 0.0.1 - 0.0.59 | Medium |
AIKIDO-2026-387266 New @ag-ui/client is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 0.0.59. | 0.0.1 - 0.0.59 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 zod Version ^3.25.76 | — | — |
rxjs Version 7.8.1 | — | — |
uuid Version ^11.1.0 | — | — |
@ag-ui/core Version 1.0.2 | — | — |
@types/uuid Version ^10.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 days ago
- Created
- 1 year ago
- Unpacked Size
- 1.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.