Vitest module mocker implementation
92%
Total Score
healthy
Healthy release backed by frequent updates, active contributors, and a maintained organization-owned project.
The repository name does not match the package and its README does not mention @vitest/mocker, which is a transparency concern; the organization and monorepo context partly compensate, but do not remove it.
| Title | Versions | Severity |
|---|---|---|
CVE-2026-84373 @vitest/mocker is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 2.1.0 - 4.1.11 and 5.0.0-beta.1 - 5.0.0-rc.2. | 2.1.0 - 4.1.115.0.0-beta.1 - 5.0.0-rc.2 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
@vitest/spy Version 5.0.3 | — | — |
magic-string Version ^1.2.3 | — | — |
estree-walker Version ^3.0.3 | — | — |
@jridgewell/trace-mapping Version 0.3.31 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.