@sanity/util
Utilities shared across projects of Sanity
78%
Total Score
healthy
Active maintenance and strong project backing are offset by extensive unpinned workflow actions and high-confidence permission findings.
Health Score Breakdown
The repository name does not match the package and its README does not mention @sanity/util. This can be normal for a monorepo, but the absent explicit reference leaves package-to-repository linkage less transparent.
The audit is incomplete because only 30 of 42 workflows were analyzed; 108 of 131 action uses are unpinned, five workflows have top-level write permissions, and high-confidence findings report blanket GitHub App permissions. No untrusted checkout or script injection was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 rxjs Version ^7.8.2 | — | — |
get-it Version ^9.6.1 | — | — |
date-fns Version ^4.4.0 | — | — |
@date-fns/tz Version ^1.5.0 | — | — |
@date-fns/utc Version ^2.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 9 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.