Package Health/@electric-sql/pglite-socket

@electric-sql/pglite-socket

A socket implementation for PGlite enabling remote connections

Latest 0.2.12

NPM

82%

Total Score

healthy

Active, well-documented package with strong release cadence; unpinned workflow actions and weak package-to-repository linkage reduce confidence.

Health Score Breakdown

Repo package mention

The repository name does not match the package and its README does not mention the package, so the linkage is weaker than expected even though a monorepo subpackage can legitimately use a shared repository.

Repo tooling

The project uses TypeScript, npm scripts, and tsup, but no security scanning tools were detected; this is a modest transparency gap rather than a dependency blocker.

Security policy

No repository security policy was found, leaving vulnerability-reporting guidance unclear for a package that exposes a socket server.

Workflow audit

The single workflow was fully analyzed with no detected sinks or audit findings, but all 113 action references are unpinned and the workflow grants top-level write permissions, creating avoidable maintenance and supply-chain exposure.