[](http://badge.fury.io/js/swagger-ui-dist)
86%
Total Score
healthy
Frequent releases, active organization-backed maintenance, and strong project hygiene outweigh limited workflow concerns.
Publishing access includes two swagger.io accounts and two Gmail-based accounts, ponelat and kyleshockey; the outside mailbox accounts are an account-hygiene caution, though organization backing and active repository contributors compensate for limited registry-account evidence.
All 10 workflows were analyzed with no untrusted checkout or script-injection findings and no top-level write permissions. However, 27 of 42 action references are unpinned, and the high-confidence bot-conditions finding merits caution; the low-confidence cache-poisoning and GITHUB_ENV findings are hygiene concerns rather than standalone severe risks.
| Title | Versions | Severity |
|---|---|---|
CVE-2021-46708 swagger-ui-dist is vulnerable to Improper Restriction of Rendered UI Layers or Frames in versions 0.0.0 - 4.1.3. | 0.0.0 - 4.1.3 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
@scarf/scarf Version =1.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.