docx
Clear licensing, TypeScript declarations, documentation, and release notes improve adoption confidence. The workflow audit found all 24 action references unpinned and one high-confidence ad hoc package install, so CI hygiene merits attention.
88%
Total Score
100
100
100
88
100
Health Score Breakdown
All six workflows were analyzed with no untrusted checkout or script-injection findings, and no workflow has top-level write permissions. However, all 24 action references are unpinned and a high-confidence finding reports an ad hoc package install; the low-confidence cache findings are hygiene concerns only.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 xml Version ^1.0.1 | — | — |
jszip Version ^3.10.1 | — | — |
nanoid Version ^6.0.1 | — | — |
xml-js Version ^1.6.8 | — | — |
hash.js Version ^1.1.7 | — | — |
Weekly Downloads
Info
- Last Published
- 8 days ago
- Created
- 10 years ago
- Unpacked Size
- 8.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.