preact
Fast 4kb React-compatible Virtual DOM library.
88%
Total Score
healthy
High-confidence template-injection findings in one workflow are the main blemish on an otherwise actively maintained, well-supported release.
Health Score Breakdown
The repository has no SECURITY.md policy, leaving vulnerability reporting guidance less explicit than ideal; active tooling and maintenance partly compensate.
All 8 workflows were analyzed with no failed files, all 33 action references are pinned, and no untrusted checkout or script-injection counts were found. However, four high-confidence template-injection findings occur in run-bench.yml, creating a real automation-hygiene concern.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-22028 preact is vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') in versions 10.26.5 - 10.26.10, 10.27.0 - 10.27.3 and 10.28.0 - 10.28.2. | 10.26.5 - 10.26.1010.27.0 - 10.27.310.28.0 - 10.28.2 | High |
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 11 years ago
- Unpacked Size
- 0.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.