Download and launch browsers
95%
Total Score
healthy
Frequent releases, active repository work, organization backing, and verified publishing make this a strong dependency choice.
All 14 workflows were analyzed successfully; all use read-only permissions and all 86 analyzed action references are pinned. A high-confidence, low-severity adhoc-packages finding installs a package outside a lockfile, while the low-confidence cache findings are hygiene concerns rather than demonstrated exploitation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yargs Version ^18.0.0 | — | — |
modern-tar Version ^0.8.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.