The core SDK for CLI apps in the Zapier Developer Platform.
88%
Total Score
healthy
Frequent releases, active contributors, and organization backing outweigh the repository’s unpinned workflow actions.
No build or security scanning tools were detected in the collected repository metadata. This is a modest process-transparency gap, though the repository’s active maintenance and separate security policy partly offset it.
Both workflows were analyzed completely with no high- or medium-confidence findings, no untrusted checkout or script injection, and scoped permissions in one workflow. However, all 24 action references are unpinned, leaving avoidable workflow supply-chain drift; this is a hygiene caution, not a severe risk on its own.
| Dependency | Last Release | Score |
|---|---|---|
dotenv Version 17.2.1 | — | — |
fernet Version ^0.3.3 | — | — |
lodash Version 4.18.1 | — | — |
semver Version 7.7.2 | — | — |
form-data Version 4.0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.