@algolia/recommend
JavaScript client for recommend
88%
Total Score
100
100
100
70
100
Health Score Breakdown
One of three workflows uses pull_request_target, which can be security-sensitive even though no untrusted checkout or script injection was detected. This is a workflow-hygiene concern requiring review.
No SECURITY.md or equivalent security policy was found, leaving vulnerability-reporting and response expectations less transparent.
One workflow lacks top-level permissions and the release workflow requests top-level write permissions. The write access may be necessary for publishing, but the broad or unspecified permissions increase workflow security exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @algolia/client-common Version 5.59.0 | — | — |
@algolia/requester-fetch Version 5.59.0 | — | — |
@algolia/requester-node-http Version 5.59.0 | — | — |
@algolia/requester-browser-xhr Version 5.59.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 5 years ago
- Unpacked Size
- 1.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.