Example usage: ```javascript import { createClient, Graph } from 'redis';
70%
Total Score
caution
Usable with caveats: the project is active, but this release is over a year old and its CI workflow has notable hygiene risks.
The package has 7 releases since May 2022, but none in the last 12 months and the latest release was over a year ago. Active repository work partly offsets the stale registry release cadence, but consumers should expect slower package updates.
All 11 workflows were analyzed without untrusted-checkout or script-injection findings, and most scope permissions at job level. However, release.yml has two high-confidence template-injection findings, and all 20 action references are unpinned; these are meaningful workflow hygiene risks even without a dangerous trigger.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.