Framework-agnostic core runtime for assistant-ui
91%
Total Score
healthy
Rapid releases and active repository work outweigh the package's monorepo naming gap and minor workflow publishing concern.
The repository name does not match the package name and its README does not mention this package, creating a linkage concern; the package documentation does identify it as a core package in the assistant-ui monorepo, which partly explains the mismatch.
Version 0.3.29 is not a prerelease, although the package remains below 1.0 and may still undergo breaking changes under its semver convention.
All 26 workflows were analyzed with no untrusted checkouts, script injection, high- or medium-severity findings, and all 95 action references pinned. The high-confidence use-trusted-publishing finding is a workflow hygiene concern, while read-only permissions are used in 21 workflows.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nanoid Version ^6.0.2 | — | — |
assistant-cloud Version ^0.2.7 | — | — |
assistant-stream Version ^0.3.52 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.