firebase-admin 14.4.0 appears to be a mature, actively maintained, and well-supported dependency. It has a long release history with 11 releases in the last 12 months, is not deprecated, is backed by an active organization-owned repository, and shows recent commits from seven contributors with low concentration. Licensing, type declarations, repository tests and changelog coverage, security scanning, workflow permissions, and security policy are all strong. The main remaining concerns are the absence of build provenance attestation and the presence of a prepare lifecycle script, which warrant normal supply-chain review but do not outweigh the substantial maintenance and transparency evidence.
94%
Total Score
100
100
100
90
50
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jwks-rsa Version ^4.0.1 | — | — |
jsonwebtoken Version ^9.0.0 | — | — |
@fastify/busboy Version ^3.0.0 | — | — |
fast-deep-equal Version ^3.1.1 | — | — |
google-auth-library Version ^10.6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.