add-to-calendar-button
The convenient TS/JS library, which lets you create beautiful add to calendar buttons. Make people save events to their calendars in a reliable way.
84%
Total Score
healthy
Healthy, with unpinned workflow actions as the main caveat.
Health Score Breakdown
A prepack script is present, so packaging performs an install-adjacent build step. This is a review point, but the signal alone does not show harmful behavior.
All 14 analyzed action references are unpinned, which weakens build reproducibility. The audit also reports high-confidence template-injection findings and a write-scoped publish workflow, but no untrusted checkout or injection trigger was found, so these remain hygiene concerns rather than a severe finding.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10132 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. add-to-calendar-button is vulnerable to Prototype Pollution in versions 1.0.1 - 2.6.17. | 1.0.1 - 2.6.17 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lit Version ^3.3.3 | — | — |
timezones-ical-library Version ^2.3.2 | — | — |
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 4 years ago
- Unpacked Size
- 3.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.