Debug plugin for Docusaurus.
86%
Total Score
100
100
94
83
100
The linked repository neither matches the package name nor mentions it in its README. The organization-owned monorepo context makes a name mismatch understandable, but the missing README mention leaves package ownership less transparent.
All 17 workflows were analyzed, all 76 action references are pinned, and most workflows use read-only permissions. High-confidence template-injection findings in publishing and several ad hoc package installs are workflow hygiene concerns, while trusted publishing is flagged for review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.6.0 | — | — |
fs-extra Version ^11.1.1 | — | — |
@docusaurus/core Version 3.10.2 | — | — |
@docusaurus/types Version 3.10.2 | — | — |
@docusaurus/utils Version 3.10.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.