@mastra/schema-compat
Tool schema compatibility layer for Mastra.ai
82%
Total Score
healthy
Strongly maintained and well-supported, with workflow hygiene and repository-linkage concerns.
Malware detected in 1 version
Health Score Breakdown
The repository name does not match the package and its README does not mention @mastra/schema-compat, so the package's ownership linkage is not explicit even though it is published under the matching organization namespace.
No security policy was found in the repository, leaving vulnerability reporting and response expectations less transparent than they should be for a widely used project.
The audit is incomplete because 30 of 32 workflows were analyzed, and it found an untrusted checkout in a workflow with a workflow_run trigger plus high-confidence template-injection findings and several ad hoc package installs. Most permissions are read-only and 144 of 145 action references are pinned, which partly offsets the workflow risk.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 json-schema-to-zod Version ^2.7.0 | — | — |
zod-from-json-schema Version ^0.5.2 | — | — |
Weekly Downloads
Info
- Last Published
- 6 hours ago
- Created
- 1 year ago
- Unpacked Size
- 5.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.