Package Health

@newrelic/browser-agent

New Relic Browser Agent

Latest 1.323.0NPMNPM

82%

Total Score

healthy

Healthy: active releases and an organization-backed repository outweigh workflow hygiene concerns.

Are you affected? Scan for Free

Health Score Breakdown

Workflow auditcaution

All 21 workflows were analyzed, but all 112 action references are unpinned, two workflows have script-injection findings, and several workflows use inherited secrets or broad write permissions. The low-confidence cache findings are hygiene only, but the confirmed issues warrant caution around automated publishing.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2024-10247 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
@newrelic/browser-agent is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 1.259.0 - 1.264.0.
1.259.0 - 1.264.0
Medium

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
fflate
Version 0.8.2
—
—
web-vitals
Version 6.2.1
—
—
@newrelic/rrweb
Version ^1.1.2
—
—

Weekly Downloads

Info

Last Published
11 days ago
Created
4 years ago
Unpacked Size
2.7 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform