Low-level network interception library for Node.js.
87%
Total Score
healthy
Frequent releases and active project backing outweigh a concentrated contributor base and workflow security concerns.
The repository has no security policy, which leaves vulnerability-reporting expectations and response procedures less transparent.
All four workflows were analyzed with no untrusted checkout or script-injection counts and all 17 action references pinned. However, the audit reports a high-confidence template-injection finding and use of trusted publishing, so workflow hygiene and credential handling warrant caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
debug Version ^4.4.3 | — | — |
rettime Version ^0.11.12 | — | — |
outvariant Version ^1.4.3 | — | — |
@types/debug Version ^4.1.13 | — | — |
is-node-process Version ^1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.