Bugsnag error reporter for Node.js
91%
Total Score
healthy
Recent releases and active, multi-contributor organizational maintenance make 9.1.0 a healthy dependency.
No build attestation or trusted-publisher identity is present, leaving publication provenance less independently verifiable. This is a transparency gap, but it is outweighed by the active, established project evidence.
All seven workflows were analyzed successfully, all 25 action references are pinned, and six workflows use read-only permissions. One workflow has top-level write permissions and test-electron.yml installs packages outside a lockfile, creating a limited workflow-hygiene concern without an untrusted trigger or high-severity finding.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pump Version ^3.0.0 | — | — |
byline Version ^5.0.0 | — | — |
iserror Version ^0.0.2 | — | — |
@bugsnag/core Version ^9.1.0 | — | — |
stack-generator Version ^2.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.