@chat-adapter/gchat
Google Chat adapter for Chat SDK — service account auth, Card v2, dialogs, and Workspace Events
94%
Total Score
healthy
Healthy release with rapid maintenance, strong project backing, and verified build provenance.
Health Score Breakdown
Both workflows were analyzed successfully, all 22 action references are pinned, and no audit findings or untrusted checkout/script-injection sinks were detected. One workflow uses top-level write permissions, a mild scope concern without an observed untrusted path to exploit it.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-602867 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @chat-adapter/gchat is vulnerable to Authentication Bypass in versions 4.21.0 - 4.36.0. | 4.21.0 - 4.36.0 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 chat Version 4.41.1 | — | — |
@googleapis/chat Version ^44.6.0 | — | — |
@chat-adapter/shared Version 4.41.1 | — | — |
@googleapis/workspaceevents Version ^9.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 9 months ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.