@sanity/types
The source project is actively maintained with frequent releases, broad contributor activity, tests, and release notes. Workflow permissions and action pinning need tightening, but organization backing and build attestation reduce adoption risk.
82%
Total Score
100
100
95
83
100
Health Score Breakdown
The repository name does not match the package and its README does not mention @sanity/types. A name mismatch is normal for a monorepo subpackage, but the lack of a README mention leaves some uncertainty about the package-to-repository link.
The audit found high-confidence blanket GitHub App permissions in multiple workflows, a secrets-inherit finding, and 108 unpinned action references out of 131. It also analyzed only 30 of 42 workflows, so workflow hygiene is a real caution despite no untrusted checkout or script-injection findings.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @sanity/client Version ^8.9.0 | — | — |
@sanity/media-library-types Version ^1.7.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 hours ago
- Created
- 6 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.