Better handling for window object in SSR environment
62%
Total Score
50
92
75
Only one registry account has publish access, which increases release bus-factor risk. The linked repository is also owned by a single user, so no organizational backing is shown to compensate for that concentration.
The package has 23 releases since 2018, but no releases in the last 12 months and the latest release was about 15 months ago. Its earlier release cadence shows maturity, but the current pause lowers maintenance confidence.
The repository had no commits and no active maintainers in the last three months. This is a meaningful sign of currently limited maintenance capacity, despite the recent historical release.
There were no new or closed issues or pull requests in the last month, while 12 pull requests remain open. This suggests limited recent project activity and responsiveness.
The repository has no security policy. This is a transparency and reporting gap, although the package's small scope and other available project documentation provide some compensating context.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10093 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. ssr-window is vulnerable to Prototype Pollution in versions 2.0.0-beta.1 - 4.0.2. | 2.0.0-beta.1 - 4.0.2 | High |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.