Links recognition library with FULL unicode support
88%
Total Score
83
100
94
75
All 62 recent commits came from one contributor, so maintenance continuity depends heavily on a single person. Organization backing helps provide a handoff path, but no second active contributor is shown.
The project uses TypeScript, npm scripts, Rollup, and Vite, but no security-scanning tools were detected, leaving a modest hygiene gap.
The sole workflow was fully analyzed, uses read-only permissions, and has no high- or medium-severity findings. However, all 3 analyzed action references are unpinned, so their exact revisions are not fixed.
| Title | Versions | Severity |
|---|---|---|
CVE-2026-59887 linkify-it is vulnerable to Inefficient Algorithmic Complexity in versions 0.0.0 - 5.0.1. | 0.0.0 - 5.0.1 | High |
CVE-2026-48801 linkify-it is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.0 - 5.0.0. | 0.0.0 - 5.0.0 | High |
| Dependency | Last Release | Score |
|---|---|---|
uc.micro Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.