Draco is a library for compressing and decompressing 3D geometric meshes and point clouds. It is intended to improve the storage and transmission of 3D graphics.
62%
Total Score
67
94
83
50
No build attestation or trusted-publisher provenance is available, leaving the origin of the published artifact less verifiable despite the otherwise established repository.
The package has 28 releases since July 2017, but none in the last 12 months and its latest release was in January 2024, indicating a meaningful maintenance slowdown.
The repository recorded zero commits and zero active maintainers in the last three months, a direct sign of currently stalled development.
There was one new issue and six new pull requests in the last month, but no issues or pull requests were closed, suggesting limited visible follow-through.
All five workflows were analyzed, but four use top-level write permissions and all four Gemini workflows have high-confidence findings that app tokens inherit blanket installation permissions; six of 17 action uses are unpinned. No untrusted checkout or script-injection paths were found, limiting the severity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.