@fal-ai/client
The fal.ai client for JavaScript and TypeScript
78%
Total Score
100
100
100
67
100
Health Score Breakdown
No security policy is published in the repository, leaving disclosure and response expectations unclear for a client that handles credentials.
Both workflows were fully analyzed with no untrusted checkouts, script-injection sinks, or unpinned actions. However, high-confidence template-injection findings appear in both workflows, one workflow grants top-level write permissions, and both install packages outside a lockfile, so workflow hygiene needs attention even without an evident dangerous trigger path.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 robot3 Version ^0.4.1 | — | — |
@msgpack/msgpack Version ^3.0.0-beta2 | — | — |
eventsource-parser Version ^1.1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 2 years ago
- Unpacked Size
- 4.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.