Easily generate .docx files with JS/TS with a nice declarative API. Works for Node and on the Browser.
82%
Total Score
healthy
Active releases and commits support the package, but every workflow action is unpinned and commits are concentrated.
One contributor made about 73% of recent commits, so ownership is concentrated despite 8 active contributors; this is a moderate continuity concern for a user-owned project.
All 24 analyzed action references are unpinned, which weakens workflow reproducibility; the audit also found a high-confidence low-severity ad hoc package install, while the cache-poisoning findings were low confidence and remain hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
xml Version ^1.0.1 | — | — |
jszip Version ^3.10.1 | — | — |
nanoid Version ^6.0.1 | — | — |
xml-js Version ^1.6.8 | — | — |
hash.js Version ^1.1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.