Package Health/@cloudflare/workerd-darwin-64

@cloudflare/workerd-darwin-64

👷 workerd for macOS 64-bit, Cloudflare's JavaScript/Wasm Runtime

Latest 1.20261012.1

NPM

82%

Total Score

healthy

Daily releases, active Cloudflare maintenance, and provenance outweigh workflow pinning and audit hygiene gaps.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All 24 workflows were analyzed, but 62 of 67 action references are unpinned and the audit found high-confidence template-injection and unpinned-image issues. The pull_request_target workflows have no untrusted checkout or script-injection findings, so this is a caution rather than a severe release risk.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10345 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @cloudflare/workerd-darwin-64 is vulnerable to Use after free in versions 1.20260226.1 - 1.20260307.1.	1.20260226.1 - 1.20260307.1	Medium
AIKIDO-2025-10357 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @cloudflare/workerd-darwin-64 is vulnerable to Use after free in versions 1.20231218.0 - 1.20250606.0.	1.20231218.0 - 1.20250606.0	Medium
AIKIDO-2024-10107 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @cloudflare/workerd-darwin-64 is vulnerable to Memory Leak in versions 1.20221108.0 - 1.20240512.0.	1.20221108.0 - 1.20240512.0	Low