SettleMint Kit - Asset Tokenization
44%
Total Score
100
83
100
50
The latest release was over 15 months ago, with no releases in the last 12 months. That is a meaningful maintenance and abandonment concern despite 33 releases overall.
No build attestation, trusted publisher, or staged publishing evidence is present. This weakens confidence that the registry artifact can be tied to a controlled build process.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10146 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @settlemint/asset-tokenization-kit is vulnerable to Log Injection in versions 0.0.10 - 0.1.15. | 0.0.10 - 0.1.15 | Low |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.