UnRS Resolver Node API
68%
Total Score
83
89
83
100
The package has 40 releases over 541 days, but only 3 releases in the last 12 months, indicating a slower recent cadence despite substantial release history.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern even though it was pushed recently and the package has recent release notes.
The repository name does not match this platform-specific package and its README does not mention the package, but the mismatch is consistent with a native subpackage in the linked resolver project; this is only a minor transparency concern.
All 9 workflows were analyzed, use read-only permissions, and pin all 46 action references. However, a high-confidence finding reports blanket app-token permissions in release.yml, while a separate low-confidence issue installs a package outside a lockfile; the high-confidence release permission issue warrants caution.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.