@electron/packager
Customize and package your Electron app with OS-specific bundles (.app, .exe, etc.) via JS or CLI
93%
Total Score
100
100
100
80
100
Health Score Breakdown
No repository security policy was found, leaving vulnerability-reporting guidance unclear for a package with substantial platform and dependency responsibilities.
Five workflows use read-only permissions, while one docs workflow has top-level write permission; this is a modest hardening gap, though no broader permissions problem is shown.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2024-29900 @electron/packager is vulnerable to Transmission of Private Resources into a New Sphere ('Resource Leak') in versions 18.3.0 - 18.3.0. | 18.3.0 - 18.3.0 | High |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 junk Version ^4.0.1 | — | — |
debug Version ^4.4.1 | — | — |
plist Version ^3.1.0 | — | — |
semver Version ^7.7.2 | — | — |
resedit Version ^2.0.3 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 2 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.