A Firebase SDK for VertexAI (preview)
64%
Total Score
caution
Usable with caveats: no registry release since October 2024, despite active Firebase repository maintenance.
The package has 102 releases but none in the last 12 months, with the latest published in October 2024; active repository work partly offsets but does not remove the release-staleness concern.
The repository name does not match the package and its README does not mention the package, so the link is less transparent than ideal; the monorepo context makes this a caution rather than a severe concern.
The repository uses established build tools including TypeScript, Rollup, Webpack, Babel, and Nx, but no security-scanning tools were detected, leaving a minor transparency gap.
Version 0.0.4 is below a stable major version and 95% of recent releases were prereleases, indicating an immature or transitional API surface.
All 21 workflows were analyzed, all 106 action references were pinned, and no untrusted checkout or script-injection paths were found. The low-confidence cache-poisoning finding is hygiene, while the high-confidence adhoc package installation is a modest workflow concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.1.0 | — | — |
@firebase/util Version 1.10.0 | — | — |
@firebase/logger Version 0.4.2 | — | — |
@firebase/component Version 0.6.9 | — | — |
@firebase/app-check-interop-types Version 0.3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.