@browserbasehq/sdk
The official Node.js library for the Browserbase API
82%
Total Score
healthy
Active maintenance is strong, but several release workflows grant GitHub app tokens broader permissions than needed.
Health Score Breakdown
The package has organization-backed publishing with four maintainers using the browserbase.com domain. The consumer and outside-domain accounts—seanmcguire12, zerofool, desaadi, and nosaj—create some account-hygiene caution, but do not indicate limited maintenance capacity.
All nine workflows were analyzed with no untrusted checkouts or script injection, and only three of 19 action references are unpinned. However, six high-confidence findings report GitHub app tokens inheriting blanket installation permissions, creating a real workflow least-privilege concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 node-fetch Version ^2.6.7 | — | — |
@types/node Version ^18.11.18 | — | — |
formdata-node Version ^4.3.2 | — | — |
agentkeepalive Version ^4.2.1 | — | — |
abort-controller Version ^3.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 14 hours ago
- Created
- 2 years ago
- Unpacked Size
- 0.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.