Package Health

botbuilder-core

Core components for Microsoft Bot Builder. Components in this library can run either in a browser or on the server.

Latest 4.23.3NPMNPM

20%

Total Score

critical

Unfit to use: the linked source repository is archived.

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the concern that development has stopped.

Repository archiveddanger

The linked Microsoft repository is archived, which is a severe abandonment risk even though it was pushed recently; archived projects should not be treated as actively maintained.

Release historycaution

The package has a long history and 549 releases, but it had no releases in the last 12 months, indicating that its previously rapid cadence has ended.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity in the last month; this is consistent with the lack of recent commits, though open-issue data is unknown.

Repo toolingcaution

The project uses established TypeScript and build tooling, but the collected repository signal reports no security-scanning tools; this is a modest transparency gap, partly offset by the documented security policy and release notes describing security fixes.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10612 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
botbuilder-core is vulnerable to Path Traversal in versions 4.0.8 - 4.23.2.
4.0.8 - 4.23.2
High

Package versions

Direct Dependencies

DependencyLast ReleaseScore
zod
Version ^3.23.8
—
—
uuid
Version ^10.0.0
—
—
botbuilder-stdlib
Version 4.23.3-internal
—
—
botframework-schema
Version 4.23.3
—
—
botframework-connector
Version 4.23.3
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
8 years ago
Unpacked Size
1.3 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform