srvx

Universal Server.

Latest 1.0.5

NPM

78%

Total Score

Dependencies

100

Maturity

Supply Chain

100

Attestations

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation, trusted publisher identity, staged publishing, or approver is recorded. The frequent release history is a compensating maintenance signal, but provenance transparency remains limited.

Package scaffolding

A substantial README documents usage and contribution steps, but the artifact contains no tests or changelog and repository-side compensation was not collected. This leaves a real, though not severe, maintainability and change-tracking gap.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-730737 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. srvx is vulnerable to Improper Access Control in versions 0.11.22 - 0.11.22.	0.11.22 - 0.11.22	Medium
AIKIDO-2026-940031 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. srvx is vulnerable to Information Disclosure in versions 0.8.3 - 0.11.22.	0.8.3 - 0.11.22	Medium
CVE-2026-33732 srvx is vulnerable to Use of Incorrectly-Resolved Name or Reference in versions 0.0.0 - 0.11.13.	0.0.0 - 0.11.13	Medium