A convenient loader for AssemblyScript modules.
45%
Total Score
75
100
79
75
100
The package includes a substantial README and release notes for version 0.28.20, but the README explicitly says the loader was deprecated in AssemblyScript 0.20 and recommends static bindings instead.
The repository had only 3 commits in the last 3 months from 1 active maintainer, indicating limited recent maintenance despite the ongoing release history.
The linked repository is an AssemblyScript monorepo, but its name does not match this package and its README does not mention @assemblyscript/loader, weakening package-to-source transparency.
All 17 analyzed action references are unpinned, and the audit found a high-confidence template-injection pattern; template injection alone is hygiene, while fully unpinned actions add a supply-chain maintenance concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.