Connect is a family of libraries for building and consuming APIs on different languages and platforms. [@connectrpc/connect](https://www.npmjs.com/package/@connectrpc/connect) brings type-safe APIs with Protobuf to TypeScript.
92%
Total Score
100
100
100
80
100
One of nine workflows uses pull_request_target, but no untrusted checkout or script injection was detected; the limited identified pattern warrants awareness but is not a demonstrated severe risk.
Seven workflows declare read-only permissions, while one publish workflow has top-level write permissions as expected for publishing; one workflow lacks top-level permissions, leaving a minor least-privilege hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.