@intlify/core-base
The package is actively released, tested, typed, and published with provenance. Review the high-confidence template-injection finding in the size-data workflow before relying on its release automation; the organization and active contributors provide maintenance capacity.
88%
Total Score
100
100
94
88
100
Health Score Breakdown
The project uses TypeScript, Vitest, Vite, npm scripts, and Rolldown for build and test work. No security-scanning tools were detected, leaving a modest transparency gap.
All eight workflows were analyzed and all 40 action references are pinned. A high-confidence template-injection finding affects size-data.yml; the two low-confidence cache-poisoning findings are hygiene concerns, while no untrusted checkout or script-injection sink was found.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10497 @intlify/core-base is vulnerable to XSS vulnerability with Prototype Pollution in versions 9.3.0 - 9.14.1 and 10.0.0 - 10.0.4. | 9.3.0 - 9.14.110.0.0 - 10.0.4 | High |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @intlify/shared Version 11.4.13 | — | — |
@intlify/devtools-types Version 11.4.13 | — | — |
@intlify/message-compiler Version 11.4.13 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.