pkijs
Public Key Infrastructure (PKI) is the basis of how identity and key management is performed on the web today. PKIjs is a pure JavaScript library implementing the formats that are used in PKI applications. It is built on WebCrypto and aspires to make it p
82%
Total Score
100
100
94
75
100
Health Score Breakdown
The project uses TypeScript, Rollup, Vitest, and npm scripts, and the repository reports tests; however, no security-scanning tools were detected, leaving a modest security-process gap.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.
All three workflows were analyzed, but all 13 action references are unpinned, the release workflow has top-level write permissions, and a high-confidence template-injection finding was reported. No untrusted checkout or script-injection sink was detected, so this is a hygiene caution rather than a severe dependency-health risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.8.1 | — | — |
asn1js Version ^3.0.6 | — | — |
pvutils Version ^1.1.3 | — | — |
pvtsutils Version ^1.3.6 | — | — |
bytestreamjs Version ^2.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 21 days ago
- Created
- 12 years ago
- Unpacked Size
- 1.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.