@oclif/core
base library for oclif CLIs
88%
Total Score
healthy
Frequent releases, active contributors, and npm provenance outweigh workflow hygiene concerns.
Health Score Breakdown
The repository has no published security policy, which is a transparency gap for a dependency used in many CLI projects.
All 26 action references are unpinned, and the audit found high-confidence template-injection findings plus secrets-inherit; no untrusted checkout or script-injection sink was reported, limiting the impact to workflow hygiene rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ejs Version ^6 | — | — |
ansis Version ^3.17.0 | — | — |
debug Version ^4.4.3 | — | — |
semver Version ^7.8.1 | — | — |
wordwrap Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 hours ago
- Created
- 6 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.