Package Health

@cloudflare/next-on-pages

`@cloudflare/next-on-pages` is a CLI tool that you can use to build and develop [Next.js](https://nextjs.org/) applications so that they can run on the [Cloudflare Pages](https://pages.cloudflare.com/) platform (and integrate with Cloudflare's various oth

Latest 1.13.16NPMNPM

12%

Total Score

critical

Unfit to use: the package is deprecated, its repository is archived, and it has had no commits in the last three months.

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecationdanger

The entire package is deprecated, with the registry directing users to the OpenNext adapter. This is a direct warning against starting a new dependency on this release line.

Release historydanger

Although the package has 440 historical releases and previously released frequently, it had no releases in the last 12 months; the old release cadence does not offset the current stoppage.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. The archived state makes this lack of activity a strong abandonment signal.

Repository archiveddanger

The linked Cloudflare repository is archived, which indicates the source project is no longer an actively maintained target for future fixes.

Workflow auditcaution

All seven workflows were analyzed, with no untrusted checkout or script-injection findings, but all 13 action references are unpinned and a high-confidence unpinned container image was found. The audit also identified trusted-publishing usage, leaving release-workflow hygiene concerns.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2024-10175 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
@cloudflare/next-on-pages is vulnerable to Server-Side Request Forgery (SSRF) in versions 1.4.0 - 1.12.0.
1.4.0 - 1.12.0
Medium

Package versions

Direct Dependencies

DependencyLast ReleaseScore
acorn
Version ^8.8.0
—
—
chalk
Version ^5.2.0
—
—
cookie
Version ^0.5.0
—
—
semver
Version ^7.5.2
—
—
esbuild
Version ^0.15.3
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
3 years ago
Unpacked Size
0.7 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform