@electron/osx-sign
Codesign Electron macOS apps
90%
Total Score
healthy
Healthy release with active maintenance, organization backing, and verified build provenance.
Health Score Breakdown
No repository security policy was found, leaving vulnerability-reporting expectations less transparent despite the presence of automated security scanning.
All five workflows were analyzed, all 15 action references are pinned, and no untrusted checkout or script-injection sink was found. However, two high-confidence template-injection findings in docs.yml and one workflow with top-level write permissions are hygiene concerns, though the audit does not show an untrusted path reaching those permissions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 debug Version ^4.3.4 | — | — |
plist Version ^3.0.5 | — | — |
semver Version ^7.7.1 | — | — |
isbinaryfile Version ^4.0.8 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 4 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.