@appium/base-plugin
The package has clear licensing, TypeScript declarations, release notes, and a small runtime dependency set. Its workflow setup needs attention because all 33 action references are unpinned and high-confidence template-injection findings affect release workflows.
78%
Total Score
100
100
89
88
100
Health Score Breakdown
The repository name does not match the package and its README does not mention @appium/base-plugin, so package ownership is less transparent. The package tree and organization backing make a monorepo subpackage plausible, but the missing explicit mention remains a caution.
The repository uses TypeScript, Gulp, Nx, and npm scripts for builds, showing an established build process. No security scanning tools were detected, which is a modest hygiene gap but not evidence of abandonment.
All 16 workflows were analyzed with no untrusted checkout or script-injection findings, but all 33 action references are unpinned and high-confidence template-injection findings affect manual release and version workflows. Top-level write permissions in two workflows add exposure, while the low-confidence cache finding is only hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @appium/types Version 1.7.1 | — | — |
@appium/support Version 7.2.8 | — | — |
@appium/base-driver Version 10.8.1 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 6 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.