@nangohq/frontend
Nango's frontend library for OAuth handling.
76%
Total Score
healthy
Healthy: active maintenance and strong provenance outweigh workflow security and pinning gaps.
Health Score Breakdown
The audit found one script-injection issue, blanket GitHub App permissions, high-confidence template-injection findings, and 76 of 97 action references unpinned. No untrusted checkout or dangerous trigger was found, so this is a meaningful workflow-hygiene caution rather than a severe package-health failure.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10179 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @nangohq/frontend is vulnerable to Insertion of Sensitive Information into Log File in versions 0.6.0 - 0.41.0. | 0.6.0 - 0.41.0 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @nangohq/types Version 0.71.12 | — | — |
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 3 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.