A Twilio helper library
88%
Total Score
healthy
Frequent releases and active organization-backed maintenance outweigh a missing security policy and incomplete workflow audit.
A prepublish lifecycle script is present. This adds some install and publication complexity, but the other packaging and provenance signals provide compensating evidence.
No SECURITY.md policy was found in the repository. This is a transparency gap for reporting vulnerabilities, though active maintenance and security scanning partly compensate.
The audit covered five of six workflows, leaving one file unanalyzed. It found only low-confidence cache-poisoning hygiene findings; three of 20 action uses are unpinned, so workflow transparency is incomplete but not a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
qs Version ^6.14.1 | — | — |
axios Version ^1.13.5 | — | — |
dayjs Version ^1.11.9 | — | — |
xmlbuilder Version ^13.0.2 | — | — |
jsonwebtoken Version ^9.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.