Implementation of the Discord Voice API for Node.js
78%
Total Score
100
100
89
67
100
The repository uses TypeScript, Vitest, tsup, and Turborepo, showing established build and test tooling. No security-scanning tools were detected, leaving a minor process gap.
No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.
Version 0.19.2 is not a stable-major release, and all recent versions are marked prereleases, so API stability is less certain despite the current version not itself being a prerelease.
All 15 workflows were analyzed, but all 46 action references are unpinned. The audit also found eight high-confidence findings involving template injection and a broadly permissioned app token; the pull_request_target trigger has no untrusted checkout or script-injection sink, so these are workflow hygiene and release-process concerns rather than an automatic critical verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ws Version ^8.19.0 | — | — |
tslib Version ^2.8.1 | — | — |
@types/ws Version ^8.18.1 | — | — |
prism-media Version ^1.3.5 | — | — |
@snazzah/davey Version ^0.1.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.