@cspell/rpc
Type Safe RPC library.
82%
Total Score
healthy
Frequent releases, organization backing, and provenance support it; workflow audit gaps and a mismatched repository link add risk.
Health Score Breakdown
The repository name does not match @cspell/rpc and its README does not mention the package. This may simply reflect a monorepo subpackage, but the package-to-repository relationship is less transparent.
The audit found one high-confidence, high-severity github-app issue where an app token inherits blanket installation permissions, and only 30 of 37 workflows were analyzed. Four workflows have top-level write permissions and 29 of 72 action references are unpinned, so release automation deserves review.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 8 months ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.