three
JavaScript 3D library
97%
Total Score
healthy
Healthy and actively maintained, with substantial recent development and strong repository hygiene.
Health Score Breakdown
No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable; the active repository and transparent package contents partly compensate.
No type declarations are included, which is a minor integration limitation for TypeScript consumers, but it does not indicate abandonment or weak supply-chain health for this JavaScript library.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2022-0177 three is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.137.0. | 0.0.0 - 0.137.0 | High |
CVE-2020-28496 three is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 0.125.0. | 0.0.0 - 0.125.0 | High |
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 18 days ago
- Created
- 13 years ago
- Unpacked Size
- 19.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.