@oxlint-tsgolint/linux-x64
Frequent releases and active contributors show strong ongoing maintenance, with signed build provenance adding confidence. The repository’s broad GitHub App token and unclear package-to-repository naming warrant extra scrutiny.
82%
Total Score
100
94
88
100
Health Score Breakdown
The repository name does not match this scoped platform package and its README does not mention the package, creating some uncertainty about the exact package linkage. The mismatch can be ordinary for a platform subpackage, so this is a limited concern.
All seven workflows were analyzed, use read-only permissions, and pin all 31 action references. However, a high-confidence finding reports a GitHub App token with blanket installation permissions, and a medium-confidence finding identifies an unpinned tool version; these are workflow hygiene and credential-scope concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 1 year ago
- Unpacked Size
- 21.4 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.