@antfu/utils
Opinionated collection of common JavaScript / TypeScript utils by @antfu
82%
Total Score
75
100
94
80
100
Health Score Breakdown
The repository recorded no commits and no active maintainers in the last three months, which is a real maintenance concern, although the package has recent releases and appears stable.
The repository uses established TypeScript and build tooling, but no security scanning tools were detected, leaving a modest security-process gap.
No repository security policy was found, reducing transparency about vulnerability reporting and response practices.
Both workflows lack top-level token permission declarations, and only one uses job-level permissions; explicit least-privilege settings would provide stronger workflow hygiene.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2023-2972 @antfu/utils is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 0.7.3. | 0.0.0 - 0.7.3 | Medium |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.