"did you mean" for oclif
88%
Total Score
healthy
Frequent releases, active organization-backed development, and provenance support this release despite workflow hygiene concerns.
The package declares postpack, prepack, and prepare lifecycle scripts. These can complicate installation or builds, although the other signals show a structured TypeScript project and provenance.
No security policy was found in the repository. This is a modest transparency gap, but it is outweighed by active maintenance and dependency scanning.
All seven workflows were analyzed with no untrusted checkout or script-injection findings, but all 15 action references are unpinned and a high-confidence medium-severity secrets-inherit finding affects onRelease.yml.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ansis Version ^3.17.0 | — | — |
@oclif/core Version ^5.1.2 | — | — |
fast-levenshtein Version ^3.0.0 | — | — |
@inquirer/prompts Version ^7.10.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.