The tRPC client library
95%
Total Score
100
100
100
80
100
Two workflows use pull_request_target, which warrants review because that trigger can expose elevated repository privileges; however, no untrusted checkouts or script-injection patterns were detected.
Six workflows lack top-level permission declarations and four declare top-level write access, leaving some automation privileges broader than ideal. This is a minor repository hygiene concern, not evidence that the release is unfit.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.