TypeScript definitions for semver
92%
Total Score
100
100
88
50
No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent even though the package has strong repository backing.
All seven workflows were analyzed, all 25 action references are pinned, and no untrusted checkout or script-injection paths were found. Four medium-confidence template-injection findings are hygiene concerns, but there are no high-severity findings or broad write permissions.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.