semver-regex
Regular expression for matching semver versions
68%
Total Score
50
100
90
75
Health Score Breakdown
The package has 16 releases over about 12 years, but none in the last 12 months and the latest registry release was in June 2022. This materially lowers confidence in ongoing release maintenance.
The repository recorded no commits and no active maintainers in the last 3 months, which supports the stalled registry cadence as a maintenance concern.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or audit failures. However, both of its two action references are unpinned, leaving a mild supply-chain hygiene gap.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2021-43307 semver-regex is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.0 - 3.1.4 and 4.0.0 - 4.0.3. | 0.0.0 - 3.1.44.0.0 - 4.0.3 | Low |
CVE-2021-3795 semver-regex is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 3.1.3 and 4.0.0 - 4.0.0. | 0.0.0 - 3.1.34.0.0 - 4.0.0 | High |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 12 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.