Type definitions for common Sanity data structures
82%
Total Score
healthy
Active organizational project with strong release activity, but workflow permissions and action pinning need attention.
The repository name does not match @sanity/types and its README does not mention the package. The organization monorepo context makes a name mismatch ordinary, but the absence of a README mention leaves package-to-repository linkage less explicit.
The audit analyzed only 30 of 42 workflows, found 108 of 131 action references unpinned, and identified high-confidence blanket app-token permissions plus inherited secrets. These are meaningful CI supply-chain hygiene concerns, although no untrusted checkout or script-injection sink was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@sanity/client Version ^8.9.0 | — | — |
@sanity/media-library-types Version ^1.7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.