@amplitude/plugin-custom-enrichment-browser
78%
Total Score
healthy
Active releases and verified publishing support this package, but its release workflow grants an app token broader permissions than needed.
Health Score Breakdown
The repository name does not match the package and its README does not mention the package, so the linkage is less transparent. The organization-backed monorepo context makes a subpackage explanation plausible but does not remove the documentation gap.
The repository has no security policy, leaving vulnerability-reporting guidance unclear. This is a transparency gap, though active maintenance and security scanning partly compensate.
Version 0.1.27 is not a stable-major release, which signals an early-stage API, but it is not a prerelease and recent prereleases account for only 20% of releases.
All 11 workflows were analyzed, with no untrusted checkouts, script injection, or unpinned action references. However, the publish-v2 workflow has three high-confidence findings that an app token inherits blanket installation permissions, creating a meaningful release-workflow hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.4.1 | — | — |
@amplitude/analytics-core Version 2.60.3 | — | — |
Weekly Downloads
Info
- Last Published
- 13 hours ago
- Created
- 7 months ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.