A spelling dictionary library useful for checking words and getting suggestions.
80%
Total Score
healthy
Frequent releases and active project practices outweigh indirect repository linkage and workflow audit concerns.
The repository name does not match cspell-dictionary and its README does not mention the package, so the linkage is less transparent than ideal even though a monorepo can legitimately contain subpackages.
The audit found one high-confidence github-app issue involving blanket installation permissions, and 29 of 72 action references are unpinned; analysis covered 30 of 37 workflows. Pull-request-target workflows had no untrusted checkouts or script injection, and most workflows use read-only permissions, which partly offsets the concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fast-equals Version ^6.1.1 | — | — |
cspell-trie-lib Version 10.4.0 | — | — |
@cspell/cspell-pipe Version 10.4.0 | — | — |
@cspell/cspell-types Version 10.4.0 | — | — |
@cspell/cspell-performance-monitor Version 10.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.