@scalar/validation
A lightweight, schema-first validation library for Scalar
78%
Total Score
healthy
The linked monorepo does not identify this package, and its workflows contain a high-confidence broad app-token finding.
Health Score Breakdown
The package has seven publish-access accounts, mostly under scalar.com, which fits its organization backing. The two outside-domain accounts, hwkr (hwkr.me) and hanspagel (hanspagel.com), are an account-hygiene caution.
The repository name does not match the package and its README does not mention @scalar/validation, so the package-to-repository relationship is less transparent even though the organization ownership matches.
All 23 workflows were analyzed, use read-only permissions, and pin all 167 action references. However, a high-confidence github-app finding reports blanket installation permissions in release.yml, while repeated secrets-inherit findings and ad hoc package installation add workflow-hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 6 months ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.