Package Health

@ag-ui/encoder

Event encoding utilities for the **Agent-User Interaction (AG-UI) Protocol**.

Latest 1.0.2NPMNPM

89%

Total Score

healthy

Active organization-backed project with frequent releases and verified builds; workflow hygiene and missing security policy are the main concerns.

Health Score Breakdown

Repo package mentioncaution

The repository name does not match the package and its README does not mention @ag-ui/encoder, which creates some package-to-repository attribution uncertainty; the organization-backed monorepo context partly offsets it.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less transparent despite the presence of CodeQL tooling.

Workflow auditcaution

All 28 workflows were analyzed with no untrusted checkout or script-injection findings and all 203 action references pinned. However, one archived action and one ad hoc package installation are concrete workflow hygiene concerns; the trusted-publishing finding is informational.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
@ag-ui/core
Version 1.0.2
—
—
@ag-ui/proto
Version 1.0.2
—
—

Weekly Downloads

Info

Last Published
10 days ago
Created
1 year ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform