A wrapper of the webchannel packages from closure-library for use outside of a closure compiled application
86%
Total Score
healthy
Healthy release backed by frequent publishing, active organization maintenance, and a non-archived source project.
The repository name does not match the package and its README does not mention this package, which weakens package-to-repository transparency. The mismatch is consistent with a monorepo subpackage, so this is only a caution.
The project uses established build tools including TypeScript, Rollup, Webpack, Babel, and Nx. Security scanning tools were not detected, which is a minor transparency gap but does not outweigh the maintenance evidence.
All 21 workflows were analyzed with no untrusted checkouts, script injections, top-level write permissions, or unpinned action references. A high-severity cache-poisoning finding had low confidence, while a high-confidence adhoc package installation is a limited workflow hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.