whatwg-url
An implementation of the WHATWG URL Standard's URL API and parsing machinery
88%
Total Score
healthy
Regular releases, current commits, and npm provenance support a healthy dependency; workflow pinning is the main caveat.
Health Score Breakdown
A prepare lifecycle script runs during installation, which adds some supply-chain exposure, although this signal alone does not show harmful behavior.
The project uses npm scripts and esbuild, but no security scanning tools were detected. This is a modest transparency gap rather than evidence of abandonment.
All three workflows were analyzed, with no untrusted checkouts or script injection. However, all 9 action references are unpinned and two workflows grant top-level write access; the low-confidence cache-poisoning finding is hygiene evidence only.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tr46 Version ^7.0.0 | — | — |
@exodus/bytes Version ^1.16.0 | — | — |
webidl-conversions Version ^8.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 hours ago
- Created
- 11 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.