Uses OS zip command if available (for better performance and speed) or node.js version if there is no system command available. Can be called via node or command line.
93%
Total Score
100
89
83
100
100
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-761465 bestzip is vulnerable to Argument Injection in versions 0.0.1 - 2.2.5 and 3.0.0 - 3.0.1. | 0.0.1 - 2.2.53.0.0 - 3.0.1 | High |
CVE-2020-7730 bestzip is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 2.1.7. | 0.0.0 - 2.1.7 | Critical |
| Dependency | Last Release | Score |
|---|---|---|
glob Version ^13.0.6 | — | — |
which Version ^6.0.1 | — | — |
yargs Version ^16.2.0 | — | — |
archiver Version ^8.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant