Classic theme for Docusaurus
88%
Total Score
100
100
94
83
100
The repository name does not match the package and its README does not mention it, which creates some identity ambiguity; the mismatch is also consistent with this package being a subpackage in a monorepo.
All 17 workflows were analyzed successfully, with no untrusted checkouts or script-injection sinks and all 76 action references pinned. High-confidence template-injection findings and ad hoc package installs warrant workflow hygiene caution; trusted-publishing was also flagged, though the release has GitHub npm provenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
clsx Version ^2.0.0 | — | — |
tslib Version ^2.6.0 | — | — |
infima Version 0.2.0-alpha.45 | — | — |
lodash Version ^4.17.21 | — | — |
rtlcss Version ^4.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.