CSV stringifier implementing the Node.js `stream.Transform` API
88%
Total Score
healthy
Healthy: active releases and repository work show this is maintained and supported.
The project uses npm scripts and TypeScript, but no repository security-scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.
The repository has no security policy, leaving vulnerability-reporting expectations unclear despite otherwise active project maintenance.
The workflow audit completed cleanly with no detected sinks or audit findings, but all 5 action references are unpinned and the publish workflow grants top-level write permissions, creating moderate workflow hygiene risk.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10458 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. csv-stringify is vulnerable to Improper Neutralization of Formula Elements in a CSV File in versions 6.1.0 - 6.5.2. | 6.1.0 - 6.5.2 | High |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.