diff
A JavaScript text diff implementation.
90%
Total Score
100
100
94
90
50
Health Score Breakdown
No build attestation, trusted publisher, or staged publishing evidence is present, leaving publication provenance less transparent even though other project-health signals are strong.
The project uses TypeScript, Rollup, Babel, npm scripts, and webpack for builds, but has no detected security-scanning tools, leaving a modest security-process gap.
The repository has no published security policy, which reduces transparency about vulnerability reporting and response expectations.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-24001 diff is vulnerable to Uncontrolled Resource Consumption in versions 6.0.0 - 8.0.3, 5.0.0 - 5.2.2, 4.0.0 - 4.0.4 and 0.0.0 - 3.5.1. | 0.0.0 - 3.5.14.0.0 - 4.0.45.0.0 - 5.2.2 +1 more | Low |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 15 years ago
- Unpacked Size
- 0.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.