node-simctl
Wrapper around Apple's simctl binary
88%
Total Score
100
100
100
67
100
Health Score Breakdown
The package has a prepare install-time script, which adds execution during installation; the available package tree shows a compiled build and TypeScript source, making a build-oriented script plausible but still a supply-chain surface.
All 10 analyzed action references are unpinned, which weakens build reproducibility, and one workflow has top-level write permissions. The audit analyzed all four workflows and found no untrusted checkout or script-injection path, so this is a hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 which Version ^6.0.0 | — | — |
rimraf Version ^6.0.1 | — | — |
semver Version ^7.0.0 | — | — |
asyncbox Version ^6.0.1 | — | — |
teen_process Version ^4.0.4 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 11 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.