An env-agnostic serializer and deserializer with recursion ability and types beyond JSON, based on the HTML structured clone algorithm.
84%
Total Score
100
100
94
75
100
The project uses TypeScript, Vite, and npm scripts for builds, but no security scanning tools were detected, leaving a modest security-process gap.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.
Both workflows were analyzed without audit findings or untrusted-code sinks, and permissions are scoped in the observed jobs. However, both action references are unpinned, so their fetched revisions are not fixed over time.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-519041 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. structured-clone-es is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 0.0.1 - 2.0.0. | 0.0.1 - 2.0.0 | Medium |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.