Electron supporting package to rebuild native node modules against the currently installed electron
82%
Total Score
healthy
A high-confidence workflow template-injection finding and missing security policy temper otherwise active, organization-backed maintenance.
A prepare script runs during installation. This is a modest supply-chain consideration, but it is not by itself evidence of poor package health.
The repository has no published security policy, leaving vulnerability-reporting and response expectations undocumented.
All five workflows were analyzed and action references are pinned, but a high-confidence template-injection finding appears twice in docs.yml. There is no untrusted checkout or script-injection sink, so this is a workflow hygiene concern rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
debug Version ^4.1.1 | — | — |
node-abi Version ^4.2.0 | — | — |
node-gyp Version ^12.2.0 | — | — |
node-api-version Version ^0.2.1 | — | — |
read-binary-file-arch Version ^1.0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.