posthog-node
PostHog Node.js integration
91%
Total Score
healthy
Frequent releases, active organizational maintenance, and strong repository controls outweigh workflow and publisher-account hygiene concerns.
Malware detected in 3 versions
Health Score Breakdown
The artifact declares MIT and includes a license file, while detection also identifies Apache-2.0; that mismatch warrants a small documentation caution despite clear licensing coverage.
The publisher list includes 11 accounts on posthog.com, consistent with organizational ownership, though outside-domain accounts rauln and twixes create a minor account-hygiene concern.
All 30 workflows were analyzed successfully, use read-only permissions, and pin all 210 action references. High-confidence bot-condition, template-injection, and github-app findings remain workflow hygiene concerns, while adhoc package installs add minor release-process risk.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @posthog/core Version ^1.58.1 | — | — |
Weekly Downloads
Info
- Last Published
- 21 hours ago
- Created
- 6 years ago
- Unpacked Size
- 0.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.