The Browser API provides the ability to open an in-app browser and subscribe to browser events.
78%
Total Score
healthy
Healthy, backed by an active organization despite broadly unpinned CI actions.
The package has 20 publishing accounts and organization backing, but consumer-domain accounts including jcesarmobile, chuckytuh, trevorlambert, and alexgerardojacinto create some account-hygiene exposure. This does not indicate a small maintenance team.
The project uses Nx, npm scripts, and TypeScript, but no security scanning tools were detected. The established build tooling compensates partly, leaving only a minor hygiene gap.
All 14 workflows were analyzed, but 50 of 52 action references are unpinned, and seven high-confidence template-injection findings affect publishing workflows. No untrusted checkout or injection trigger was found, so this is a workflow-hygiene caution rather than a standalone severe verdict.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.