UnRS Resolver Node API
69%
Total Score
caution
Usable with caveats: no commits in three months and a high-severity workflow finding weaken an otherwise supported release.
The repository recorded zero commits and zero active maintainers in the last three months. A recent push and current release provide some compensation, but the measured development pause raises maintenance risk.
The repository has open issues and pull requests, but none were opened or closed in the last month. This gives some evidence of active work while showing limited recent issue throughput.
The repository name does not match this platform-specific package and its README does not mention the package. Although a subpackage mismatch can be normal in a monorepo, the missing README reference leaves some uncertainty that this repository is the intended source.
The audit analyzed all nine workflows, found no untrusted checkout or script-injection paths, all 46 action uses are pinned, and all workflows use read-only permissions. However, it found a high-confidence high-severity github-app issue involving blanket installation permissions, plus an adhoc package install, so workflow security remains a material caution.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.