This package provides enhanced features for module federation.
82%
Total Score
healthy
Healthy, with active maintenance and strong release provenance outweighing workflow and security-documentation concerns.
The repository name does not match the package and its README does not mention the package, creating some uncertainty about package-to-repository alignment despite the matching organization backing.
No repository security policy was found, leaving vulnerability reporting and response expectations less transparent than they could be.
All 26 workflows were analyzed and action references are fully pinned, but high-confidence template-injection findings occur in a workflow-run automation, alongside repeated high-confidence secrets-inherit findings and an ad hoc package install. These are meaningful automation hygiene concerns, though no untrusted checkout or script injection was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tapable Version 2.3.0 | — | — |
schema-utils Version 4.3.0 | — | — |
@module-federation/cli Version 2.9.2 | — | — |
@module-federation/sdk Version 2.9.2 | — | — |
@module-federation/rspack Version 2.9.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.