A collection of dependency free helpers
84%
Total Score
healthy
Active releases and strong project backing outweigh workflow permission concerns and the repository’s weak package naming link.
Seven accounts have publish access, with five using the scalar.com domain. The outside-domain accounts hwkr (hwkr.me) and hanspagel (hanspagel.com) are account-hygiene cautions, while organization backing provides continuity.
The repository is an organization monorepo whose name differs from the package and whose README does not mention @scalar/helpers; this weak linkage leaves some uncertainty about package ownership despite the matching Scalar organization.
Version 0.16.2 is not a prerelease and recent releases contain no prereleases, but the package remains below 1.0, so API stability is less certain.
All 23 workflows were analyzed, use read-only permissions, and pin all 166 action references. However, high-confidence blanket GitHub App permissions, inherited secrets, and ad hoc package installation create workflow hygiene and supply-chain concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.