@sanity/client
Client for retrieving, creating and patching data from Sanity.io
72%
Total Score
caution
Usable with caveats: active maintenance is offset by risky GitHub Actions permissions and unpinned workflow actions.
Health Score Breakdown
The audit covered all 11 workflows but found high-confidence blanket GitHub App permissions, template-injection findings, one untrusted checkout on a pull_request_target workflow, and 70 of 81 actions unpinned. These workflow weaknesses create meaningful release and CI supply-chain exposure, although several workflows use read-only permissions and the audit completed fully.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 obug Version ^3.0.0 | — | — |
rxjs Version ^7.8.2 | — | — |
get-it Version ^9.5.7 | — | — |
eventsource Version ^5.1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 10 years ago
- Unpacked Size
- 3.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.