@bytecodealliance/componentize-js
ESM -> WebAssembly Component creator, via a SpiderMonkey JS engine embedding
80%
Total Score
healthy
Healthy: frequent releases and active, organization-backed maintenance support this package.
Health Score Breakdown
The repository uses build tooling, but no security-scanning tools were detected. That is a modest transparency and maintenance gap, not evidence of abandonment.
No repository security policy was found, leaving reporting and response expectations undocumented. This is a limited transparency concern for a package that builds and publishes native and WebAssembly artifacts.
Version 0.23.0 is not a prerelease, although 40% of recent releases were prereleases and the package remains below 1.0. Expect some API change risk, but not release instability.
All 4 workflows were analyzed with no untrusted checkouts, script-injection sinks, or broad top-level write permissions. However, the audit found high-confidence template-injection hygiene issues and a high-confidence adhoc package installation, while 13 of 41 action references were unpinned.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oxc-parser Version ^0.76.0 | — | — |
es-module-lexer Version ^1.6.0 | — | — |
@bytecodealliance/jco Version ^1.15.1 | — | — |
@bytecodealliance/weval Version ^0.5.0 | — | — |
@bytecodealliance/wizer Version ^10.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 24 days ago
- Created
- 3 years ago
- Unpacked Size
- 40.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.