Internal shared browser utilities and extension primitives for PostHog Browser SDKs
88%
Total Score
healthy
Frequent releases, active organization-backed maintenance, and strong build hygiene outweigh minor repository and workflow concerns.
The repository name does not match the package and its README does not mention the package, creating some uncertainty about package-specific ownership; the organization-backed monorepo context partly offsets that concern.
All 30 workflows were analyzed successfully; all use read-only permissions and all 211 action references are pinned. High-confidence bot-condition, template-injection, GitHub App, and ad-hoc package findings remain workflow hygiene concerns, but no untrusted checkout or script-injection sink was detected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@posthog/core Version ^1.59.1 | — | — |
@posthog/types Version ^1.416.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.