Package Health

@assistant-ui/core

Framework-agnostic core runtime for assistant-ui

Latest 0.3.29NPMNPM

91%

Total Score

healthy

Rapid releases and active repository work outweigh the package's monorepo naming gap and minor workflow publishing concern.

Health Score Breakdown

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, creating a linkage concern; the package documentation does identify it as a core package in the assistant-ui monorepo, which partly explains the mismatch.

Version stabilitycaution

Version 0.3.29 is not a prerelease, although the package remains below 1.0 and may still undergo breaking changes under its semver convention.

Workflow auditcaution

All 26 workflows were analyzed with no untrusted checkouts, script injection, high- or medium-severity findings, and all 95 action references pinned. The high-confidence use-trusted-publishing finding is a workflow hygiene concern, while read-only permissions are used in 21 workflows.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
nanoid
Version ^6.0.2
—
—
assistant-cloud
Version ^0.2.7
—
—
assistant-stream
Version ^0.3.52
—
—

Weekly Downloads

Info

Last Published
9 hours ago
Created
7 months ago
Unpacked Size
9 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform