@kurkle/color
css color parsing, manupulation and conversion
91%
Total Score
healthy
Active maintenance, reproducible publishing, and solid project documentation outweigh the workflow pinning gap.
Health Score Breakdown
The package uses prepack and prepare lifecycle scripts. These are common for building published artifacts, but they add install and packaging behavior that warrants some caution.
All three workflows were analyzed with no audit findings, no untrusted checkout or injection sinks, and read-only permissions on two workflows. However, all 14 action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 17 hours ago
- Created
- 6 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.