@mikro-orm/entity-generator
The package includes bundled types, a clear license, a README, and no install-time scripts. GitHub Actions has high-confidence template-injection findings and a release workflow with broad write permissions, so its publishing hygiene needs attention.
88%
Total Score
100
100
100
83
100
Health Score Breakdown
All four workflows were analyzed and all 39 action references are pinned, with no untrusted checkout or script-injection trigger found. However, high-confidence template-injection findings affect release and test workflows, and the release workflow has top-level write permissions; these are meaningful workflow hygiene concerns but not independently severe enough to outweigh the project's maintenance evidence.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-509766 @mikro-orm/entity-generator is vulnerable to Path Traversal in versions 0.0.1 - 7.1.8. | 0.0.1 - 7.1.8 | Low |
AIKIDO-2026-567761 @mikro-orm/entity-generator is vulnerable to Code Injection in versions 0.0.1 - 7.1.8. | 0.0.1 - 7.1.8 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @mikro-orm/sql Version 7.2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 6 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.