Oxc Resolver Node API
82%
Total Score
100
94
83
100
The repository name differs from this platform-specific binding and the README does not mention the package. A name mismatch is normal for a monorepo subpackage, but the lack of a README mention leaves some ownership transparency uncertainty.
All eight workflows were analyzed, use read-only permissions, and have no unpinned actions or untrusted checkouts. However, the high-confidence github-app finding reports blanket installation permissions in the release workflow, creating a real credential-scope concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.