Oxc Transformer Node API
84%
Total Score
healthy
Healthy release with strong maintenance and provenance; workflow credential overreach and repository naming mismatch are notable caveats.
The linked repository neither matches this platform package name nor mentions it in its README, creating uncertainty about the package-to-repository relationship. The organization-backed repository and package structure partly offset that concern, but do not remove it.
All analyzed action references are pinned and workflows generally use read-only or job-level permissions, but eight high-confidence github-app findings report blanket installation permissions across CI and release workflows. The audit covered 30 of 32 workflows, so it is not fully complete.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.