datatables.net

DataTables - The Javascript table library

Latest 3.1.3

NPM

86%

Total Score

healthy

Healthy: frequent releases and active source maintenance outweigh concentrated contribution.

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation was found, although staged publishing is used. The missing attestation limits verifiability of the published artifact.

Repo bus factor

One contributor made about 99% of the 110 recent commits, leaving maintenance highly concentrated. A second contributor remains active, and the organization-owned project can provide some handoff capacity.

Repo tooling

The project uses TypeScript, Rollup, and npm scripts for builds, but no security-scanning tools were detected. This is a transparency and hygiene gap rather than evidence of abandonment.

Security policy

No repository security policy was detected, reducing guidance for reporting vulnerabilities and handling security issues.

Vulnerabilities

Title	Versions	Severity
CVE-2021-23445 datatables.net is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.11.3.	0.0.0 - 1.11.3	Medium
CVE-2020-28458 datatables.net is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 1.10.22.	0.0.0 - 1.10.22	High