Self-host the Inter font in a neatly bundled NPM package.
76%
Total Score
healthy
Healthy: a recent stable release and active project backing outweigh limited workflow and package-identification concerns.
The repository name does not match the package name and its README does not mention this package, so the link is less transparent; the mismatch is understandable for a monorepo, but the absent mention remains a caution.
No build tool or security scanning tool was detected in the repository. This is a modest transparency and hygiene gap, though the package is primarily generated font assets.
The repository has no security policy. That limits documented vulnerability-reporting guidance, but it is a hygiene concern rather than evidence of abandonment by itself.
All 19 analyzed action references are unpinned, and five workflows grant top-level write permissions; these are workflow hygiene concerns, while no untrusted checkout, script injection, or high-severity findings were reported.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.