@intlify/shared
88%
Total Score
healthy
Frequent releases, active organization-backed development, and verified publishing support this release.
The project uses TypeScript, Vitest, Vite, npm scripts, and Rolldown for its build and test workflow. No security scanning tool was detected, leaving a minor tooling gap.
All eight workflows were analyzed with no untrusted checkout or script-injection findings, and all 40 action references are pinned. A high-confidence template-injection finding and two low-confidence cache-poisoning findings remain workflow hygiene concerns, while the write permissions are not paired with an identified untrusted sink.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10838 @intlify/shared is vulnerable to Cross-site Scripting (XSS) in versions 11.1.10 - 11.4.3. | 11.1.10 - 11.4.3 | Medium |
AIKIDO-2024-10498 @intlify/shared is vulnerable to Prototype Pollution in versions 9.3.0 - 9.14.1 and 10.0.0 - 10.0.4. | 9.3.0 - 9.14.110.0.0 - 10.0.4 | High |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.