chat
Clear documentation, TypeScript declarations, release notes, and signed build provenance make this straightforward to adopt. The release workflow grants broad write access, but the audit found no untrusted checkout, script injection, or other flagged workflow issue.
95%
Total Score
100
100
100
88
100
Health Score Breakdown
Both workflows were analyzed successfully; all 22 action references are pinned and no untrusted checkout, script injection, or audit findings were reported. One release workflow has top-level write permissions, which is a mild hygiene concern, but no untrusted input was found reaching it.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-742388 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. chat is vulnerable to Improper Authorization in versions 4.29.0 - 4.36.0. | 4.29.0 - 4.36.0 | Medium |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 remend Version ^1.2.1 | — | — |
unified Version ^11.0.5 | — | — |
remark-gfm Version ^4.0.0 | — | — |
remark-parse Version ^11.0.0 | — | — |
@workflow/serde Version 4.1.0-beta.2 | — | — |
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 13 years ago
- Unpacked Size
- 1.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.