A library for parsing VS Code style problem matchers
82%
Total Score
healthy
Healthy: active Microsoft-backed project with strong contributor activity and only a minor workflow-hygiene concern.
The package has four releases over its first 356 days, but the latest release was about seven months before collection. Strong repository activity partly compensates for the modest release cadence.
Version 0.2.1 is not marked as a prerelease, although the 0.x major version indicates an API that may still evolve.
All two workflows were analyzed, all five action references are pinned, and no untrusted checkout or script-injection paths were found. One high-confidence template-injection finding remains a workflow-hygiene concern, but it is not corroborated by a dangerous trigger or sink.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.