Add components to your apps.
87%
Total Score
healthy
Active maintenance and provenance are strong, but all workflow actions are unpinned and one high-confidence template-injection finding needs attention.
All 11 workflows were analyzed, with no untrusted checkout or script-injection count, but all 64 action references are unpinned and a high-confidence template-injection finding appears in code-check.yml; two low-confidence-independent adhoc package findings add minor hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cn Version ^0.2.4 | — | — |
ora Version ^8.2.0 | — | — |
zod Version ^3.24.1 | — | — |
diff Version ^8.0.2 | — | — |
open Version ^11.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.