Package Health/@cloudflare/workerd-linux-64

@cloudflare/workerd-linux-64

👷 workerd for Linux 64-bit, Cloudflare's JavaScript/Wasm Runtime

Latest 1.20261013.1

NPM

72%

Total Score

caution

Frequent releases and strong project activity are offset by serious GitHub Actions hygiene issues.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All 24 workflows were analyzed, but 62 of 67 action references are unpinned, and high-confidence template-injection findings appear in _bazel.yml and release.yml. High-confidence unpinned images and archived actions add hygiene risk, while no untrusted checkout or script-injection sink was found.

Maintainers

Three of four publishing accounts use the cloudflare.com domain, consistent with organization-backed publishing; dash_service_account uses cloudflare-ui.com, an outside domain that is a minor account-hygiene concern.

Repo package mention

The repository name does not match the package name and its README does not mention this package. This may reflect a monorepo subpackage, but the collected evidence leaves package ownership less explicit.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2024-10227 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @cloudflare/workerd-linux-64 is vulnerable to Race Condition in versions 1.20221108.0 - 1.20240815.0.	1.20221108.0 - 1.20240815.0	Medium