@protobufjs/codegen
A minimalistic code generation utility.
78%
Total Score
healthy
Healthy: active project maintenance supports this stable release despite workflow and package-ownership hygiene gaps.
Health Score Breakdown
No build attestation or trusted-publisher metadata was observed, leaving release provenance less transparent even though other project evidence is strong.
The repository name does not match this package and its README does not mention it, so the package-to-repository relationship is less transparent; the mismatch may reflect a monorepo but remains a caution.
The project uses TypeScript, npm scripts, and Gulp, but no repository security-scanning tools were detected; the separate SECURITY.md provides some compensating process evidence.
Both workflows were analyzed with no untrusted checkout or script-injection paths, but all 12 action references are unpinned, one workflow has top-level write permissions, and high-confidence adhoc-package findings remain; the low-confidence cache finding is hygiene only.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 9 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.