Supabase CLI binary (linux-x64)
84%
Total Score
healthy
Frequent releases and active multi-contributor development outweigh minimal package metadata, with a workflow token-scope concern.
The repository name does not match this platform-specific package and its README does not mention the package, which creates some uncertainty about the package-to-repository link. The shared organization and CLI source context partly reduce that concern, but do not eliminate it.
The audit found two high-confidence findings where an app token inherits blanket installation permissions, plus a low-confidence hygiene issue involving an ad hoc package install. No untrusted checkout or script-injection sinks were found, but only 30 of 47 workflows were analyzed, so the workflow picture is incomplete.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.