@voltagent/supabase
VoltAgent Supabase - Supabase Memory provider integration for VoltAgent
76%
Total Score
100
100
93
75
Health Score Breakdown
The repository name does not match this package and its README does not mention it, so the package-to-source relationship is not clearly demonstrated. The package is part of an organization-owned monorepo, which makes a name mismatch ordinary but does not resolve the missing README reference.
All 37 action references are unpinned, which weakens build reproducibility, and the pull-request workflow has two high-confidence template-injection findings. No untrusted checkout or script-injection path was detected, so these are important hygiene concerns rather than a severe dependency risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10542 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @voltagent/supabase is vulnerable to Cross-site Scripting (XSS) in versions 0.0.1 - 0.1.17. | 0.0.1 - 0.1.17 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ts-pattern Version ^5.7.1 | — | — |
@voltagent/internal Version ^1.0.2 | — | — |
@supabase/supabase-js Version ^2.49.4 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 1 year ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.