Common JavaScript SDK utils
86%
Total Score
healthy
Healthy: active releases and twelve recent contributors outweigh workflow and repository-identity caveats.
The repository name does not match @percy/sdk-utils and its README does not mention the package, so the package-to-repository relationship is less explicit despite the shared Percy organization.
The repository has no SECURITY.md policy, leaving vulnerability reporting guidance less transparent than it could be.
All 12 workflows were analyzed, with no untrusted checkout or script-injection findings and all 58 action references pinned. However, trusted publishing, two workflows with top-level write permissions, and high-confidence low-severity hygiene findings warrant caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pac-proxy-agent Version ^7.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.