@appium/docutils
Documentation generation utilities for Appium and related projects
82%
Total Score
healthy
Healthy release backed by active Appium maintenance, with workflow pinning and audit issues as caveats.
Health Score Breakdown
The repository name does not match the package and its README does not mention @appium/docutils, creating some uncertainty about package ownership. The organization-backed Appium monorepo and package file tree partially compensate because a name mismatch is common for monorepo subpackages.
The repository uses established build tooling and has a working build process, but the collected tooling signal reports no security-scanning tools. The separate security policy and workflow audit provide some compensating transparency.
All 16 workflows were analyzed, with no untrusted checkouts or script-injection findings, but all 33 action references are unpinned and high-confidence template-injection findings affect release and version workflows. These are meaningful workflow hygiene and supply-chain concerns, though no dangerous trigger-and-sink combination was reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 diff Version 9.0.0 | — | — |
yaml Version 2.9.1 | — | — |
yargs Version 18.1.0 | — | — |
consola Version 3.4.2 | — | — |
lilconfig Version 3.1.3 | — | — |
Weekly Downloads
Info
- Last Published
- 18 days ago
- Created
- 4 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.