87%
Total Score
88
94
67
100
One contributor made about 89% of the 81 recent commits, despite 6 active contributors; this concentration creates a moderate continuity risk, though the organization-owned project provides some handoff capacity.
The repository name does not match the package and its README does not mention the package, so the linkage is less transparent; this may be normal for a monorepo sub-package but remains a caution.
No repository security policy was found, leaving disclosure and response procedures unclear for a package used in build workflows.
All 9 workflows were analyzed with no high- or medium-severity findings and all 36 action references pinned. Two workflows have top-level write permissions and a high-confidence low-severity workflow installs a package outside a lockfile, which are minor hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
builder-util Version 26.15.3 | — | — |
app-builder-lib Version 26.15.3 | — | — |
electron-winstaller Version 5.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.