Package Health

@cosmjs/faucet-client

The faucet client

Latest 0.39.0NPMNPM

67%

Total Score

caution

Usable with caveats: no repository commits in the last 3 months despite regular releases.

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, a meaningful maintenance warning despite the regular registry release history.

Repo issue activitycaution

Only one issue was opened and none were closed in the last month, while 46 pull requests remain open; this suggests limited recent issue throughput.

Repo package mentioncaution

The repository name differs from the package name, which is normal for a monorepo, but the README does not mention this package; that leaves a modest source-linkage transparency gap.

Workflow auditcaution

All seven workflows were analyzed with no dangerous audit findings or untrusted checkout paths, and permissions are scoped in several workflows. However, 23 of 26 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10463 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
@cosmjs/faucet-client is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 0.26.8 - 0.33.1.
0.26.8 - 0.33.1
Medium

Package versions

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
5 months ago
Created
5 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform