DataTables bundle for itables
72%
Total Score
67
50
94
83
The bundle declares 18 runtime dependencies, which increases dependency surface and update exposure, though the dependencies are consistent with an extension bundle.
The repository is owned by an individual account rather than an organization, so the concentrated maintainer activity is not offset by visible organizational backing.
One contributor made about 87% of the recent commits, leaving a thin backup base; the second active contributor partly reduces but does not remove this concentration risk.
The repository name does not match the package name and its README does not mention dt_for_itables, so the package's ownership relationship to the linked repository is not clearly demonstrated.
The repository has no security policy, which weakens vulnerability reporting transparency, although CodeQL and Dependabot provide some compensating security process.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10314 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. dt_for_itables is vulnerable to Prototype Pollution in versions 2.0.10 - 2.3.0. | 2.0.10 - 2.3.0 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
jszip Version ^3.10.1 | — | — |
jquery Version ^4.0.0 | — | — |
datatables.net-dt Version ^2.3.8 | — | — |
datatables.net-buttons Version ^3.0.1 | — | — |
datatables.net-plugins Version ^2.3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.