mapbox-gl
A WebGL interactive maps library
82%
Total Score
healthy
Healthy release backed by frequent updates and a broad contributor base.
Health Score Breakdown
The linked repository name does not match mapbox-gl and its README does not mention the package by name. Although a monorepo can explain the name mismatch, the lack of a package mention warrants caution about source-package alignment.
Both workflows were analyzed successfully, use job-level permissions, and have no reported findings or untrusted checkout sinks. However, all 7 analyzed action references are unpinned, leaving avoidable update and supply-chain hygiene risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-953702 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. mapbox-gl is vulnerable to Prototype Pollution in versions 1.0.0 - 3.24.1. | 1.0.0 - 3.24.1 | Medium |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 12 years ago
- Unpacked Size
- 64.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.