livekit-client
JavaScript/TypeScript client SDK for LiveKit
86%
Total Score
healthy
Active releases and broad contributor activity outweigh two high-confidence workflow hygiene findings.
Health Score Breakdown
The project uses established TypeScript, Rollup, Vite, npm, Webpack, and Babel tooling, but no security-scanning tools were detected, leaving a modest process gap.
No SECURITY.md or equivalent security policy was found in the repository, reducing transparency about vulnerability reporting and response.
All six workflows were analyzed with no untrusted checkouts or script injections and all 26 action references pinned. High-confidence findings flag a floating latest container image and template injection; these are workflow hygiene concerns, not standalone evidence of an unsafe release.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10122 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. livekit-client is vulnerable to Improper Handling of Insufficient Permissions or Privileges in versions 0.0.1 - 2.9.4. | 0.0.1 - 2.9.4 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jose Version ^6.1.0 | — | — |
tslib Version 2.8.1 | — | — |
events Version ^3.3.0 | — | — |
machina Version ^7.0.0 | — | — |
loglevel Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 5 years ago
- Unpacked Size
- 12.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.