Package Health

ibm-cloud-sdk-core

Core functionality to support SDKs generated with IBM's OpenAPI SDK Generator.

Latest 5.9.1NPMNPM

86%

Total Score

healthy

Regular releases and active IBM-backed maintenance make this a mature dependency; workflows still use unpinned actions.

Health Score Breakdown

Build provenancecaution

No build attestation or trusted-publisher identity was recorded, leaving publication provenance less transparent than it could be. This is a modest supply-chain hygiene gap, not evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkouts or injection findings. However, all six action references are unpinned, so their fetched code is not fixed to known revisions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
axios
Version 1.20.0
—
—
debug
Version 4.4.3
—
—
dotenv
Version 16.6.1
—
—
extend
Version 3.0.2
—
—
isstream
Version 0.1.2
—
—

Weekly Downloads

Info

Last Published
21 hours ago
Created
7 years ago
Unpacked Size
1.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform