@signalk/server-admin-ui
Signal K server admin webapp
78%
Total Score
healthy
Healthy release with active maintenance, though workflow hygiene and license metadata need attention.
Health Score Breakdown
The package declares MIT, while the linked repository license file is detected as Apache-2.0; that mismatch reduces licensing clarity even though both provide an explicit license.
The linked repository name does not match this subpackage and its README does not mention the package, creating some provenance ambiguity; the organization-owned monorepo context partly compensates.
All nine workflows were analyzed, but all 69 action references are unpinned, one release workflow uses an archived action, and high-confidence adhoc package installs remain. Top-level write permissions affect five workflows, while no untrusted checkout or script-injection sink was found, limiting the severity.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10640 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @signalk/server-admin-ui is vulnerable to Improper Authentication in versions 0.0.1 - 2.25.0. | 0.0.1 - 2.25.0 | High |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 zustand Version ^5.0.14 | — | — |
Weekly Downloads
Info
- Last Published
- 20 days ago
- Created
- 8 years ago
- Unpacked Size
- 5.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.