@algolia/autocomplete-plugin-algolia-insights
A plugin to add Algolia Insights to Algolia Autocomplete.
82%
Total Score
healthy
Healthy, with active maintenance and trusted publishing; workflow credential and dependency hygiene need attention.
Health Score Breakdown
A prepare lifecycle script is present, which adds some install-time execution surface; no other lifecycle concern is shown here.
No repository security policy was found, leaving vulnerability reporting and response expectations less transparent.
All four workflows were analyzed, but two have top-level write permissions, all 27 action references are unpinned, and high-confidence blanket GitHub App permissions affect two workflows; a high-confidence ad hoc package install adds a smaller reproducibility concern. No untrusted checkout or script-injection path was found.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10082 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @algolia/autocomplete-plugin-algolia-insights is vulnerable to Improper Authentication in versions 1.0.0 - 1.15.0. | 1.0.0 - 1.15.0 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @algolia/autocomplete-shared Version 1.19.12 | — | — |
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.