@vercel/hono
82%
Total Score
healthy
Active releases and a large contributor base support it, but the linked repository does not identify this package and workflow auditing is incomplete.
Health Score Breakdown
The linked repository name does not match @vercel/hono and its README does not mention the package, so the package-to-repository relationship is less transparent despite the organization ownership.
The artifact contains no type declarations, which is a consumer-facing gap for TypeScript users; the available signals do not show that this package is primarily a command-line tool.
All 24 workflows were analyzed, but one file failed auditing; 75 of 156 action uses are unpinned, and high-confidence template-injection findings plus broad package installs create workflow-hygiene concerns. No untrusted checkout or script-injection sink was reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 zod Version 3.22.4 | — | — |
fs-extra Version 11.1.0 | — | — |
ts-morph Version 12.0.0 | — | — |
@vercel/nft Version 1.10.0 | — | — |
@vercel/node Version 23.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 1 year ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.