@commitlint/lint
Lint a string against commitlint rules
88%
Total Score
100
95
67
Health Score Breakdown
The project uses TypeScript, Vitest, build tooling, and npm scripts, supporting a structured build and test process. No security scanning tooling was detected, leaving a minor transparency gap.
The repository has no security policy, which makes vulnerability reporting less clear, although active maintenance and project backing partly compensate.
All five workflows were analyzed with no untrusted checkout or script-injection findings, but 20 of 25 action references are unpinned, one workflow installs a package outside a lockfile, and one workflow has top-level write permissions. These are meaningful workflow hygiene concerns, not severe evidence on their own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @commitlint/parse Version ^21.2.3 | — | — |
@commitlint/rules Version ^21.2.3 | — | — |
@commitlint/types Version ^21.2.3 | — | — |
@commitlint/is-ignored Version ^21.2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 23 days ago
- Created
- 8 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.