electron-builder lib
86%
Total Score
88
94
83
100
One contributor made about 89% of the last three months' commits, leaving maintenance unusually concentrated despite five other contributors remaining active.
The repository name differs from the package name and its README does not mention this package, creating some uncertainty about the package-to-repository mapping; the mismatch can also reflect a monorepo subpackage.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.
| Title | Versions | Severity |
|---|---|---|
CVE-2026-54672 app-builder-lib is vulnerable to Uncontrolled Search Path Element in versions 0.0.0 - 26.15.0. | 0.0.0 - 26.15.0 | High |
CVE-2024-27303 app-builder-lib is vulnerable to Untrusted Search Path in versions 0.0.0 - 24.13.2. | 0.0.0 - 24.13.2 | High |
| Dependency | Last Release | Score |
|---|---|---|
ajv Version ^8.18.0 | — | — |
ejs Version ^3.1.8 | — | — |
tar Version ^7.5.7 | — | — |
jiti Version ^2.4.2 | — | — |
debug Version ^4.3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.