Dictionary of common NPM packages for cspell.
88%
Total Score
healthy
Healthy: frequent releases and active organization-backed maintenance outweigh concentrated commits and one workflow permission concern.
All 16 workflows were analyzed without untrusted checkouts or script injection, and 13 use read-only permissions. One high-confidence finding reports blanket GitHub App installation permissions in release-please.yml, while 17 of 35 action references are unpinned, so workflow hygiene warrants caution.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.