Pages plugin for Docusaurus.
84%
Total Score
100
100
95
88
100
The repository name does not match the package and its README does not mention the package, creating a package-identification caveat. The repository file tree nevertheless contains the package's source files, which partly supports the monorepo relationship.
All 17 workflows were analyzed, all 76 action references are pinned, and no untrusted checkout or script-injection trigger was found. High-confidence template-injection findings and repeated ad hoc package installs reduce workflow hygiene, while trusted publishing was also flagged as a caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.6.0 | — | — |
webpack Version ^5.88.1 | — | — |
fs-extra Version ^11.1.1 | — | — |
@docusaurus/core Version 3.10.2 | — | — |
@docusaurus/types Version 3.10.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.