mocha
Classic, reliable, trusted test framework for Node.js and the browser
78%
Total Score
healthy
Healthy, with active maintenance and transparent releases offset by notable GitHub Actions hygiene risks.
Health Score Breakdown
Sixteen runtime dependencies create meaningful transitive maintenance surface for a test framework, but the profile is visible and not unusually opaque on its own.
All 15 workflows were analyzed, but 21 of 22 action references are unpinned and several workflows grant top-level write access. High-confidence GitHub App and template-injection findings, plus an ad hoc package install, add workflow hygiene risk, although no untrusted checkout or script-injection path was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ms Version ^2.1.3 | — | — |
diff Version ^9.0.0 | — | — |
glob Version ^13.0.0 | — | — |
debug Version ^4.3.5 | — | — |
js-yaml Version ^5.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 14 years ago
- Unpacked Size
- 1.4 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.