@ark/schema
Underlying schema language parsed from arktype syntax.
86%
Total Score
healthy
Active organization-backed project with strong maintenance, but workflow reproducibility and package-repository linkage need attention.
Health Score Breakdown
The repository name does not match @ark/schema and its README does not mention the package. Although a monorepo name mismatch can be normal, the absence of a README mention leaves the package-to-repository linkage less transparent.
The project uses TypeScript, npm scripts, and tsup for builds. No security scanning tools were detected, which is a minor transparency gap, but the repository does provide a security policy.
All 3 workflows were analyzed with no untrusted checkout or script-injection findings, but all 11 action references are unpinned, two workflows grant top-level write permissions, and the audit found medium-confidence template injection plus high-confidence ad hoc package installation. These are workflow hygiene and reproducibility concerns, not standalone severe risks.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @ark/util Version 0.56.7 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 2 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.