High-performance type-aware TypeScript linter powered by typescript-go, for use with oxlint.
84%
Total Score
healthy
Frequent releases and active organization-backed maintenance outweigh workflow credential hygiene and weak package-to-repository naming evidence.
The repository name does not match the package and its README does not mention the package, leaving some uncertainty about package-to-source identity; this is a caution despite the broader organization-backed project context.
All seven workflows were analyzed, use read-only permissions, and pin all 31 actions; however, a high-confidence github-app finding reports blanket app-token permissions, with an additional unpinned tool.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.