@tus/file-store
Clear documentation, bundled typings, release notes, and npm provenance make integration and updates straightforward. The concentrated contributor activity is offset by three active maintainers in an organization-owned project; workflow references remain a minor hygiene concern.
87%
Total Score
100
100
100
67
100
Health Score Breakdown
No repository security policy was found, leaving vulnerability-reporting expectations less explicit despite the presence of automated security scanning.
All three workflows were analyzed without high-confidence findings or untrusted checkouts, but 6 of 7 action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene weaknesses, not severe risks on their own.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-279680 @tus/file-store is vulnerable to Path Traversal in versions 0.0.1 - 2.1.0. | 0.0.1 - 2.1.0 | Critical |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 debug Version ^4.3.4 | — | — |
@tus/utils Version ^0.7.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 3 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.