Oxc Resolver Node API
84%
Total Score
healthy
Active releases and an attested build outweigh one high-confidence workflow permission finding.
The repository name does not match this platform-specific package and its README does not mention the package, creating some uncertainty about package-to-repository ownership; the organization and monorepo-style structure partly reduce that concern.
All 8 workflows use read-only permissions and all 45 analyzed action references are pinned, but a high-confidence finding reports a GitHub App token inheriting blanket installation permissions.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.