Package Health/@apidevtools/json-schema-ref-parser

@apidevtools/json-schema-ref-parser

Parse, Resolve, and Dereference JSON Schema $ref pointers

Latest 16.0.5

NPM

89%

Total Score

healthy

Active, well-documented releases with provenance and tests outweigh a concentrated contributor base and limited security process.

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

Two contributors were active, but one authored 87.5% of the recent commits. The organization-owned project provides some handoff capacity, so this is a mild concentration concern rather than a severe risk.

Repo tooling

The project uses TypeScript, Vite, webpack, Rollup, and npm scripts, showing an established build setup. No security scanning tools were detected, leaving a security-process gap.

Security policy

The repository has no SECURITY.md or other detected security policy, reducing transparency for vulnerability reporting and response.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-523065 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @apidevtools/json-schema-ref-parser is vulnerable to Prototype Pollution in versions 7.1.4 - 15.5.0.	7.1.4 - 15.5.0	Low
AIKIDO-2026-933244 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @apidevtools/json-schema-ref-parser is vulnerable to Server-Side Request Forgery (SSRF) in versions 14.0.0 - 15.5.0.	14.0.0 - 15.5.0	Medium
AIKIDO-2026-516453 @apidevtools/json-schema-ref-parser is vulnerable to Prototype Pollution in versions 15.3.0 - 15.3.5.	15.3.0 - 15.3.5	Low
AIKIDO-2025-10381 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @apidevtools/json-schema-ref-parser is vulnerable to Server-Side Request Forgery in versions 11.4.1 - 13.0.5.	11.4.1 - 13.0.5	Low
AIKIDO-2024-10043 @apidevtools/json-schema-ref-parser is vulnerable to Prototype Pollution in versions 11.0.0 - 11.1.1.	11.0.0 - 11.1.1	Low