WebdriverIO testrunner command line interface
90%
Total Score
healthy
Active development and strong release hygiene outweigh workflow audit concerns around template injection and inherited secrets.
All 26 workflows were analyzed, but high-confidence template-injection findings in publish.yml and medium-confidence secrets-inherit findings expose workflow-hygiene concerns; one ad hoc package install and one unpinned action add minor risk. The pull_request_target workflow has no untrusted checkout or script-injection finding, which limits the severity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tsx Version ^4.7.2 | — | — |
chalk Version ^5.4.1 | — | — |
yargs Version ^18.2.0 | — | — |
dotenv Version ^17.2.0 | — | — |
chokidar Version ^4.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.