astro-mermaid
An Astro integration for rendering Mermaid diagrams with automatic theme switching and client-side rendering
87%
Total Score
83
100
100
75
100
Health Score Breakdown
Only one registry publishing account is listed, which limits publishing redundancy, although repository activity shows two recent contributors.
The repository has no security policy. This is a transparency and response-process gap, though it is not evidence of abandonment by itself.
The sole workflow has top-level write permissions and both analyzed action references are unpinned. The audit found no untrusted checkout, injection, or high-severity findings, so this is a workflow hygiene caution rather than a severe risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10460 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. astro-mermaid is vulnerable to Cross-Site Scripting (XSS) in versions 1.0.0 - 1.4.0. | 1.0.0 - 1.4.0 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 unist-util-visit Version ^5.0.0 | — | — |
import-meta-resolve Version ^4.2.0 | — | — |
mdast-util-to-string Version ^4.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 1 year ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.