This is the Firebase Functions component of the Firebase JS SDK.
88%
Total Score
100
88
83
The repository name does not match the package and its README does not mention @firebase/functions, creating a package-identity transparency concern. The package is nevertheless represented in the repository's Functions API documentation and file tree.
Version 0.14.0 is not a stable major and 80% of recent releases are prereleases, which adds some release-channel uncertainty, though this is a mature and frequently released package.
All 21 workflows were analyzed, all 106 action references are pinned, permissions are read-only or job-scoped, and no untrusted checkout or script injection was found. A high-severity cache finding had low confidence, while a high-confidence ad hoc package install is a minor hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.1.0 | — | — |
@firebase/util Version 1.15.3 | — | — |
@firebase/component Version 0.7.5 | — | — |
@firebase/auth-interop-types Version 0.2.6 | — | — |
@firebase/app-check-interop-types Version 0.3.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.