swiper

Most modern mobile touch slider and framework with hardware accelerated transitions

Latest 14.3.0

NPM

92%

Total Score

healthy

Healthy release with long-running maintenance, frequent releases, and strong repository support.

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation or trusted-publisher provenance is present. This is a modest transparency gap, but the package has substantial independent release and repository evidence.

Security policy

The repository has no SECURITY policy. That weakens vulnerability-reporting transparency, although Dependabot and active project maintenance provide partial compensation.

Workflow audit

No workflows were analyzed and one file failed, so the audit cannot establish workflow hygiene; there were no reported findings, but this result is incomplete rather than a clean bill of health.

Vulnerabilities

Title	Versions	Severity
CVE-2026-27212 swiper is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 6.5.1 - 12.1.2.	6.5.1 - 12.1.2	Critical
AIKIDO-2025-10318 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. swiper is vulnerable to Cross-site Scripting (XSS) in versions 10.0.0 - 11.2.6.	10.0.0 - 11.2.6	Low
CVE-2021-23370 swiper is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 6.5.1.	0.0.0 - 6.5.1	Critical