@scalar/themes
the default CSS variables for all Scalar packages
86%
Total Score
healthy
Active releases, strong project backing, and a workflow audit with one high-severity token finding shape this score.
Health Score Breakdown
Five of seven publish accounts use the scalar.com domain and the project is organization-backed; hwkr and hanspagel use outside domains, creating a modest account-hygiene concern.
Version 0.19.1 is not a stable-major release, which adds some API-maturity uncertainty, but it is not a prerelease and recent releases contain no prerelease versions.
All 23 workflows were analyzed, all 167 action references are pinned, and permissions are read-only; however, a high-confidence high-severity github-app finding reports blanket app-token permissions in release.yml, with several high-confidence secrets-inherit findings and an ad hoc package install adding hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nanoid Version ^5.1.6 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 3 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.