Package Health

csv-stringify

CSV stringifier implementing the Node.js `stream.Transform` API

Latest 6.9.0NPMNPM

88%

Total Score

healthy

Healthy: active releases and repository work show this is maintained and supported.

Are you affected? Scan for Free

Health Score Breakdown

Repo toolingcaution

The project uses npm scripts and TypeScript, but no repository security-scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear despite otherwise active project maintenance.

Workflow auditcaution

The workflow audit completed cleanly with no detected sinks or audit findings, but all 5 action references are unpinned and the publish workflow grants top-level write permissions, creating moderate workflow hygiene risk.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10458 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
csv-stringify is vulnerable to Improper Neutralization of Formula Elements in a CSV File in versions 6.1.0 - 6.5.2.
6.1.0 - 6.5.2
High

Package versions

Maintainers

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
19 days ago
Created
12 years ago
Unpacked Size
1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform