84%
Total Score
100
93
75
The repository name does not match @jest/console and its README does not mention the package, so the linkage is less transparent than ideal. The monorepo context makes a name mismatch ordinary, but the lack of a README mention still warrants caution.
All 11 workflows were analyzed, all 48 action references were pinned, and there were no high- or medium-severity findings. The audit did identify high-confidence trusted-publishing usage, which is a supply-chain hygiene concern despite its informational severity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
chalk Version ^4.1.2 | — | — |
slash Version ^3.0.0 | — | — |
jest-util Version 30.5.1 | — | — |
@jest/types Version 30.5.1 | — | — |
@types/node Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.