Temporal.io SDK Client sub-package
92%
Total Score
100
100
100
80
50
No build attestation or staged publishing evidence is available, leaving release origin and build reproducibility less transparent than they could be.
No repository security policy was found, which makes vulnerability reporting and disclosure expectations less transparent.
All workflows declare top-level permissions, but 4 of 8 request top-level write permissions; explicit permissions are better than omissions, though broad write access increases CI impact if compromised.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
long Version ^5.3.2 | — | — |
uuid Version ^11.1.0 | — | — |
nexus-rpc Version ^0.0.3 | — | — |
@grpc/grpc-js Version ^1.12.4 | — | — |
abort-controller Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.