@capacitor/android
Healthy and suitable to install. It has a long, active release history, current organization-backed development, balanced contributors, and build provenance; the main caveat is incomplete workflow permission hardening and no automated security-scanning tools reported.
92%
Total Score
100
100
94
90
100
Health Score Breakdown
The repository uses build tooling, but no security-scanning tools were reported, leaving a modest transparency and preventive-controls gap.
Eight publishing workflows request top-level write permissions and six workflows declare no top-level permissions, while none are reported read-only; this is a genuine workflow-hardening gap despite the absence of other dangerous workflow patterns.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-103922 New @capacitor/android is vulnerable to Origin Validation Error in versions 6.0.0 - 6.2.2, 7.0.0 - 7.6.9, 8.5.0 - 8.5.1, 8.3.5 - 8.4.3 and 8.0.0 - 8.3.4. | 6.0.0 - 6.2.27.0.0 - 7.6.98.0.0 - 8.4.3 +1 more | Critical |
AIKIDO-2026-297931 @capacitor/android is vulnerable to Cross-Site Scripting (XSS) in versions 5.7.1 - 6.2.1, 7.0.0 - 7.6.8, 8.0.0 - 8.4.2 and 8.5.0 - 8.5.0. | 5.7.1 - 6.2.17.0.0 - 7.6.88.0.0 - 8.4.2 +1 more | Critical |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 25 days ago
- Created
- 8 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.