effect

The missing standard library for TypeScript, for writing production-grade software.

Latest 4.0.3

NPM

94%

Total Score

healthy

Long-lived, highly active project with signed provenance; only minor workflow hygiene concerns.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All eight workflows were analyzed, use read-only permissions, and have no unpinned actions or untrusted checkout findings. High-confidence findings for ad hoc package installation and trusted publishing are minor workflow hygiene concerns.

Vulnerabilities

Title	Versions	Severity
CVE-2026-32887 effect is vulnerable to Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in versions 0.0.0 - 3.20.0.	0.0.0 - 3.20.0	High
AIKIDO-2025-10095 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. effect is vulnerable to Uncaught Exception in versions 2.0.0 - 3.12.11.	2.0.0 - 3.12.11	Low
CVE-2020-7624 effect is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 1.0.4.	0.0.0 - 1.0.4	Critical