> Monorepo of isomorphic utility functions
83%
Total Score
healthy
Healthy and actively maintained, with frequent releases and recent commits outweighing a concentrated maintainer base.
The repository is owned by an individual rather than an organization, so the concentrated contributor activity has less organizational handoff support.
Two contributors are active, but one made 60 of 63 recent commits, leaving maintenance highly concentrated despite the recent activity.
This release is not a prerelease, but the recent prerelease share is 0.9 and the major version remains 0, indicating a less stable compatibility track.
Both workflows were analyzed without high-confidence findings, unsafe checkout, or script injection; however, all 12 action references are unpinned, which weakens build reproducibility and action supply-chain control.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-270573 lib0 is vulnerable to Out-of-Bounds Read in versions 0.1.0 - 0.2.117. | 0.1.0 - 0.2.117 | High |
| Dependency | Last Release | Score |
|---|---|---|
isomorphic.js Version ^0.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.