satori
Enlightened library to convert HTML and CSS to SVG.
94%
Total Score
healthy
Frequent releases, active organization backing, and attested builds outweigh minor workflow and install-script hygiene gaps.
Health Score Breakdown
A prepare script runs during installation, adding execution during dependency setup; this is a modest operational concern without evidence here of harmful behavior.
Both workflows were analyzed successfully, with no untrusted checkouts, script injection, or write-wide permissions; however, four of five action uses are unpinned and a high-confidence low-severity audit found an ad hoc package installation.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-567228 satori is vulnerable to SVG Injection in versions 0.0.27 - 0.33.4. | 0.0.27 - 0.33.4 | Medium |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 fflate Version 0.7.3 | — | — |
linebreak Version ^1.1.0 | — | — |
harfbuzzjs Version 0.10.0 | — | — |
escape-html Version ^1.0.3 | — | — |
css-box-shadow Version 1.0.0-3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 4 years ago
- Unpacked Size
- 25 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.