@azure/keyvault-keys
Isomorphic client library for Azure KeyVault's keys.
68%
Total Score
100
100
94
67
50
Health Score Breakdown
The audit found high-confidence template-injection findings, including in a pull_request_target workflow, which creates a meaningful automation supply-chain concern. Most workflows use read-only permissions, there are no untrusted checkouts or script injections, and only 9 of 807 action references are unpinned.
No build attestation or trusted-publisher provenance is reported, leaving publication origin less independently verifiable despite the package's strong maintenance evidence.
The repository name differs from the package and its README does not mention the package, creating some uncertainty about package-to-repository correspondence; the organization-owned monorepo context partly offsets that concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.8.1 | — | — |
@azure/logger Version ^1.1.4 | — | — |
@azure/core-lro Version ^2.7.2 | — | — |
@azure/core-auth Version ^1.9.0 | — | — |
@azure/core-util Version ^1.11.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 7 years ago
- Unpacked Size
- 2.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.