Microsoft Application Insights Core Javascript SDK
88%
Total Score
healthy
Frequent releases and active Microsoft-backed maintenance outweigh concentrated recent commits and workflow hygiene issues.
Version 3.4.5 is a stable major release and is not a prerelease, although the recent prerelease share is high at 90%, which adds some uncertainty around release experimentation.
All seven workflows were analyzed with no untrusted checkouts or script injection, and all 18 action references are pinned. However, five workflows grant top-level write permissions and high-confidence findings report ad hoc package installation; the low-confidence cache-poisoning findings are hygiene concerns rather than decisive evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@nevware21/ts-async Version >= 0.5.5 < 0.6.0 | — | — |
@nevware21/ts-utils Version >= 0.14.0 < 2.x | — | — |
@microsoft/dynamicproto-js Version ^2.0.3 | — | — |
@microsoft/applicationinsights-shims Version 3.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.