serialize-javascript

Serialize JavaScript to a superset of JSON that includes regular expressions and functions.

Latest 7.1.2

NPM

88%

Total Score

healthy

Healthy release with active maintenance and provenance; workflow pinning and missing security policy are minor caveats.

Are you affected? Scan for Free

Health Score Breakdown

Security policy

The repository has no security policy, leaving vulnerability reporting expectations unclear; this is a transparency gap but not evidence of abandonment.

Type declarations

No type declarations are published, which modestly reduces convenience for typed consumers, but this is a consumer-ergonomics gap rather than evidence of poor maintenance.

Workflow audit

Both workflows were analyzed without failures and have no untrusted checkout or script-injection findings. However, all four action references are unpinned, and the publish workflow has top-level write permissions; the low-confidence cache-poisoning finding is hygiene rather than a severe risk.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-390982 serialize-javascript is vulnerable to Cross-Site Scripting (XSS) in versions 7.0.1 - 7.1.1.	7.0.1 - 7.1.1	Low
AIKIDO-2026-179900 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. serialize-javascript is vulnerable to Cross-Site Scripting (XSS) in versions 7.0.1 - 7.1.0.	7.0.1 - 7.1.0	Medium
AIKIDO-2026-965854 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. serialize-javascript is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 6.0.0 - 7.0.5.	6.0.0 - 7.0.5	High
CVE-2026-34043 serialize-javascript is vulnerable to Uncontrolled Resource Consumption in versions 5.0.0 - 7.0.5.	5.0.0 - 7.0.5	Medium
AIKIDO-2025-10874 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. serialize-javascript is vulnerable to Cross Site Scripting (XSS) in versions 0.0.1 - 7.0.0.	0.0.1 - 7.0.0	Medium