CLI for webpack & friends
92%
Total Score
100
100
100
83
100
All 6 workflows were analyzed with no untrusted checkout or script-injection paths, and all 22 action references are pinned. High-confidence bot-conditions and github-app findings, plus three workflows with top-level write permissions, are workflow hygiene cautions, while the low-confidence cache finding and low-severity ad hoc package installation are limited concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
envinfo Version ^7.21.0 | — | — |
rechoir Version ^0.8.0 | — | — |
commander Version ^14.0.3 | — | — |
interpret Version ^3.1.1 | — | — |
cross-spawn Version ^7.0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.