The package has a clear README, release notes, and a long record of regular releases. Its publishing workflows have high-confidence template-injection findings and use trusted publishing, but no untrusted checkout or script-injection path was found.
88%
Total Score
100
100
100
83
100
The audit found high-confidence template-injection findings and use-trusted-publishing, which are workflow hygiene and publishing concerns. However, all workflows were analyzed, actions were pinned, and no untrusted checkout or script-injection path was found, so this warrants caution rather than a severe deduction.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10483 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. deno is vulnerable to Improper Input Validation in versions 1.42.4 - 2.7.11. | 1.42.4 - 2.7.11 | Medium |
AIKIDO-2026-10444 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. deno is vulnerable to Observable Timing Discrepancy in versions 0.0.1 - 2.7.6. | 0.0.1 - 2.7.6 | Low |
AIKIDO-2025-10449 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. deno is vulnerable to Out-of-bounds Read in versions 1.44.0 - 2.4.0. | 1.44.0 - 2.4.0 | Medium |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.