JavaScript AsyncAPI parser.
86%
Total Score
100
100
100
83
100
All 25 workflows were analyzed with no untrusted checkouts or script injection, and 24 use read-only permissions. High-confidence findings concern archived actions and ad hoc package installs, while the low-confidence cache finding is hygiene rather than a standalone severe risk; 25 of 107 action references are unpinned.
| Dependency | Last Release | Score |
|---|---|---|
ajv Version ^8.18.0 | — | — |
avsc Version ^5.7.5 | — | — |
js-yaml Version ^4.3.1 | — | — |
ajv-errors Version ^3.0.0 | — | — |
node-fetch Version 2.6.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.