@paperclipai/server

Latest 2026.1012.0

NPM

90%

Total Score

healthy

Active releases, signed builds, organizational backing, and maintained source outweigh minor workflow hygiene concerns.

Are you affected? Scan for Free

Health Score Breakdown

Dependency profile

Fifty-seven runtime dependencies indicate a broad integration surface for a server package, adding maintenance complexity but matching the package's stated implementation footprint.

Workflow audit

All 21 workflows were analyzed successfully with no untrusted checkouts or script injections; 49 of 291 action references are unpinned and several high-confidence template-injection findings remain workflow hygiene concerns, but no trigger-and-sink combination was shown.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10712 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @paperclipai/server is vulnerable to Uncontrolled Resource Consumption in versions 2026.318.0 - 2026.416.0.	2026.318.0 - 2026.416.0	Medium
AIKIDO-2026-10711 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @paperclipai/server is vulnerable to Information Disclosure in versions 2026.318.0 - 2026.416.0.	2026.318.0 - 2026.416.0	Low
AIKIDO-2026-10710 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @paperclipai/server is vulnerable to Improper Authorization in versions 2026.318.0 - 2026.416.0.	2026.318.0 - 2026.416.0	High
CVE-2026-41208 @paperclipai/server is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 2026.416.0.	0.0.0 - 2026.416.0	High