@vercel/build-utils
86%
Total Score
healthy
Frequent stable releases, active organization-backed development, and broad contributor activity outweigh workflow hygiene concerns.
Health Score Breakdown
The repository name does not match the package and its README does not mention it, creating some uncertainty about package-specific ownership; the @vercel namespace and linked Vercel monorepo provide partial context but do not remove that gap.
All 24 workflows were analyzed, but one file failed and 75 of 156 action uses are unpinned. High-confidence template-injection findings and repeated ad hoc package installs weaken workflow hygiene, while no untrusted checkout or script-injection sink was found and the trusted-publishing finding is informational.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 es-module-lexer Version 1.5.0 | — | — |
cjs-module-lexer Version 1.2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 6 years ago
- Unpacked Size
- 1.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.