The Sodium cryptographic library compiled to pure JavaScript (raw library, no wrappers)
82%
Total Score
80
94
67
50
No build attestation or trusted-publisher setup is reported, so consumers have limited evidence connecting the published artifact to its source build.
Only one registry account has publish access, creating some publishing concentration, but repository activity shows another active contributor.
The repository is owned by an individual rather than an organization, so the single registry maintainer and small contributor base provide limited visible maintenance redundancy.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a cryptographic library.
No type declarations are included, which can make TypeScript integration less convenient for this browser and server-side library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.