Package Health

Scriban

Scriban 7.4.0 appears actively maintained and mature: it has 141 releases over more than 10 years, 30 releases in the last 12 months, a stable non-prerelease version, a substantial package file tree, and only three runtime dependencies. However, the release has no declared or packaged license, no packaged tests or changelog, and no declared source-repository link, which reduces legal and maintenance transparency; repository activity and other operational health signals were not available, so confidence is moderate rather than high.

Latest 7.4.0NuGetNuGet

72%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Health Score Breakdown

Licensecaution

No declared license was found, and the artifact contains no license file. This creates a genuine legal and transparency concern for dependents.

Package scaffoldingcaution

The artifact includes a substantial README, but it contains no packaged tests or changelog, leaving testing and release-history documentation gaps. The README and source files provide useful context, but do not fully compensate for the missing validation and change documentation.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-477016
Scriban is vulnerable to Sandbox Bypass in versions 0.0.0 - 6.6.0.
0.0.0 - 6.6.0
Critical
AIKIDO-2026-377213
Scriban is vulnerable to Denial of Service (DoS) in versions 0.1.0 - 7.1.0.
0.1.0 - 7.1.0
High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
microsoft.csharp
Version [4.7.0, )
—
—
system.text.json
Version [10.0.8, )
—
—
system.threading.tasks.extensions
Version [4.6.3, )
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform