The Unified Toolchain for the Web
92%
Total Score
healthy
Active organization-backed project with frequent releases, strong repository activity, and clean publishing provenance.
All 27 workflows were analyzed with no high- or medium-severity findings; all 213 action references are pinned and permissions are read-only or job-scoped. One high-confidence low-severity finding reports an ad hoc package installation outside a lockfile.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
postcss Version ^8.5.29 | — | — |
yuku-parser Version 0.19.0 | — | — |
lightningcss Version ^1.33.0 | — | — |
@oxc-project/types Version =0.154.0 | — | — |
@oxc-project/runtime Version =0.154.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.