Client for Contentful's Content Delivery API
92%
Total Score
100
100
100
80
100
A prepare lifecycle script is present, which adds some install-time behavior; no evidence here indicates that it is malicious or unusually risky, and the repository shows an established build setup.
Three workflows declare read-only permissions and none declare top-level write permissions, but two workflows lack top-level permissions declarations, leaving a modest least-privilege hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
axios Version ^1.15.0 | — | — |
tslib Version ^2.8.1 | — | — |
type-fest Version ^4.0.0 | — | — |
contentful-sdk-core Version ^10.0.0 | — | — |
json-stringify-safe Version ^5.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.