@datadog/datadog-ci-base
Base package for Datadog CI
78%
Total Score
healthy
Active Datadog maintenance is offset by workflow injection findings, broad release permissions, and no security policy.
Health Score Breakdown
The package has 26 runtime dependencies, including networking, parsing, and CLI libraries. This is a substantial dependency surface, but the available evidence does not show it to be unmanaged.
No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though active maintenance and automated dependency scanning partly offset it.
The audit found high-confidence template-injection findings in the release workflow, one workflow with top-level write permissions, and one ad hoc package installation. No untrusted checkout or script-injection trigger was found, but one file failed and the audit is incomplete, so this is a meaningful workflow-hygiene concern rather than a standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 glob Version ^13.0.6 | — | — |
chalk Version ^3.0.0 | — | — |
debug Version ^4.4.1 | — | — |
jszip Version ^3.10.1 | — | — |
upath Version ^2.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 1 year ago
- Unpacked Size
- 1.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.