Simple sitemap generation plugin for Docusaurus.
82%
Total Score
healthy
Healthy release with strong maintenance and provenance, despite highly concentrated recent commits and an indirect package-to-repository match.
Recent activity is highly concentrated: one contributor made 75 of 77 commits. Organization backing and two additional active contributors partly reduce the handoff risk, but the concentration remains a caution.
The repository name does not match the package and its README does not mention the package, so the package-to-repository relationship is less transparent even though a monorepo mismatch alone is ordinary.
All 17 workflows were analyzed, all 76 action references are pinned, and no untrusted checkout or script-injection paths were found. High-confidence template-injection findings and ad hoc package installs are hygiene concerns, while trusted publishing is flagged as a caution under the audit rules.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.6.0 | — | — |
sitemap Version ^7.1.1 | — | — |
fs-extra Version ^11.1.1 | — | — |
@docusaurus/core Version 3.10.2 | — | — |
@docusaurus/types Version 3.10.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.