@ts-graphviz/ast

Graphviz AST(Abstract Syntax Tree) Utilities

Latest 3.0.6

NPM

65%

Total Score

caution

Usable with caveats: releases have paused and repository commits have been absent for the last three months.

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has 88 releases and 26 in the last 12 months, showing substantial release activity, but the latest release was about 7 months ago and the cadence is now stale.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. This is a meaningful maintenance warning, especially alongside the latest release being about 7 months ago.

Repo issue activity

No issues or pull requests were opened, closed, or merged in the last month, which adds some evidence of reduced current project activity but is weaker than the commit signal.

Workflow audit

All 10 workflows were analyzed, use read-only permissions, and pin all 91 action references. The one high-confidence low-severity adhoc-packages finding shows a package installed outside a lockfile, a limited reproducibility concern.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2025-10804 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @ts-graphviz/ast is vulnerable to Denial of Service (DoS) in versions 2.0.0 - 3.0.4.	2.0.0 - 3.0.4	Medium
AIKIDO-2025-10759 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @ts-graphviz/ast is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 3.0.3.	0.0.1 - 3.0.3	Low