shaka-player
DASH/EME video player library
88%
Total Score
healthy
Frequent releases, active contributors, and organization backing support a mature release; nearly all workflow actions remain unpinned.
Health Score Breakdown
All 13 workflows were analyzed with no untrusted checkouts or script injections, but 70 of 71 action references are unpinned; this is a supply-chain hygiene caution. The high-confidence template-injection findings are hygiene concerns only because no corroborating dangerous sink was reported.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10529 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. shaka-player is vulnerable to Denial of Service in versions 4.0.0 - 4.15.38, 4.16.0 - 4.16.26 and 5.0.0 - 5.0.10. | 4.0.0 - 4.15.384.16.0 - 4.16.265.0.0 - 5.0.10 | Medium |
AIKIDO-2026-10528 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. shaka-player is vulnerable to CSS Injection in versions 4.0.0 - 4.15.37, 4.16.0 - 4.16.25 and 5.0.0 - 5.0.9. | 4.0.0 - 4.15.374.16.0 - 4.16.255.0.0 - 5.0.9 | Low |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 11 years ago
- Unpacked Size
- 84.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.