@antfu/ni
Use the right package manager
91%
Total Score
100
100
95
80
100
Health Score Breakdown
The repository uses TypeScript, testing, build tooling, and npm scripts, showing a reproducible development setup. It has no detected security-scanning tools, which is a modest transparency gap for a package distributed to developers.
The repository has no SECURITY.md policy. This does not show unsafe code, but it gives users no documented channel or process for reporting vulnerabilities.
All three workflows omit top-level token permissions, although none declares top-level write access and one uses job-level permissions. This is a minor workflow-hygiene gap rather than evidence of dangerous automation.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 fzf Version ^0.5.2 | — | — |
tinyexec Version ^1.3.0 | — | — |
tinyglobby Version ^0.2.17 | — | — |
package-manager-detector Version ^1.8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 27 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.4 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.