Package Health/@module-federation/runtime-tools

@module-federation/runtime-tools

Module federation runtime package collection. You can just install it instead of installing all the packages separately.

Latest 2.9.2

NPM

78%

Total Score

healthy

Healthy overall, with active maintenance and provenance offset by workflow security findings and a missing security policy.

Health Score Breakdown

Repo package mention

The repository name does not match this package and its README does not mention it, so the package's ownership relationship is less transparent. The organization and package namespace do align, which partly reduces concern.

Security policy

The repository has no published security policy, leaving reporting and response expectations unclear despite the repository's active maintenance.

Workflow audit

All 26 workflows were analyzed and all 113 action references are pinned, with no untrusted checkouts or script injections. However, high-confidence template-injection findings occur in a workflow with a workflow_run trigger, and high-confidence secrets-inherit findings broaden credential exposure; these are meaningful workflow risks.