formidable
A node.js module for parsing form data, especially file uploads.
65%
Total Score
100
83
100
50
Health Score Breakdown
No build attestation or trusted-publisher provenance is present, so consumers have less evidence connecting the published artifact to its build process. This is a transparency gap, but not severe enough to outweigh the package's license, structure, and long release history.
The package has a long history and 90 releases, but it has had no release in the last 12 months; the latest release was about 16 months before collection, which raises a maintenance concern.
No type declarations are included. This is a real integration gap for TypeScript consumers, although it does not by itself indicate abandonment or unsafe maintenance.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2025-46653 formidable is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in versions 3.1.1-canary.20211030 - 3.5.3 and 2.1.0 - 2.1.3. | 2.1.0 - 2.1.33.1.1-canary.20211030 - 3.5.3 | Low |
CVE-2022-29622 formidable is vulnerable to Unrestricted Upload of File with Dangerous Type in versions 0.0.0 - 3.2.4. | 0.0.0 - 3.2.4 | Critical |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 once Version ^1.4.0 | — | — |
dezalgo Version ^1.0.4 | — | — |
@paralleldrive/cuid2 Version ^2.2.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 15 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.