A socket implementation for PGlite enabling remote connections
80%
Total Score
healthy
Frequent releases and active contributors support this package, despite broad workflow permissions and all 118 actions being unpinned.
The linked repository name does not match this package and its README does not mention the package, so the package-to-repository relationship is less directly established; the organization backing and package tree provide some context but do not remove that concern.
The project uses TypeScript, npm scripts, and tsup, but no repository security-scanning tools were detected, leaving a modest hygiene gap.
No security policy was found in the repository, reducing transparency about vulnerability reporting and response.
Version 0.2.13 is not yet at a stable major version, but it is not a prerelease and recent prerelease share is zero.
The single analyzed workflow has top-level write permissions and all 118 action references are unpinned. No untrusted checkout, injection, or auditor findings were detected, so this is workflow hygiene caution rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.