Types for the DOM, and other web technologies in browsers
91%
Total Score
healthy
Frequent releases, active organizational maintenance, and strong repository hygiene outweigh minor workflow and provenance gaps.
The release has no build attestation or trusted-publisher identity, leaving publication provenance less independently verifiable. This is a transparency gap, not evidence that the release is unsafe.
All 6 workflows were analyzed with no high- or medium-severity findings; action references are fully pinned and the pull_request_target workflow has no untrusted checkout or script-injection sink. Two deploy/update workflows install packages outside a lockfile, a low-severity reproducibility and workflow-hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.