10,101 packages matching responsible disclosure

@deepseek-ai/dsh-client-ui-settings-plugin-inventory

v0.0.1-rc.3 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Read-only Cordis Loader inventory tab in Web Plugins settings

391.4KDownloads across all versions in the last 7 days, from the official npm downloads API.BSD-3-ClauseLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.0.1-rc.3 (the latest release), from the OSV.dev database.

accessible-menu

v4.4.0 · 8 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A JavaScript library to help you generate WCAG accessible menus in the DOM.

4.4KDownloads across all versions in the last 7 days, from the official npm downloads API.ISCLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.4.0 (the latest release), from the OSV.dev database.

@accessible/disclosure

v3.0.2 · 6 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

🅰 An accessible and versatile disclosure component for React

466Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.0.2 (the latest release), from the OSV.dev database.

third-party-web

v0.30.0 · 1 day ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Categorized data on third party entities on the web.

4.0MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.30.0 (the latest release), from the OSV.dev database.

@hutson/parse-repository-url

v5.0.0 · 6 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Parse repository URLs to extract, SCM platform, domain, user, and project information.

2.3MDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v5.0.0 (the latest release), from the OSV.dev database.

cypress-social-logins

v1.14.7 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

cypress authentication flows using social network providers

4.3KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.14.7 (the latest release), from the OSV.dev database.

htmlbars

v0.14.24 · 10 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

HTMLBars compiles Handlebars templates into document fragments rather than string buffers

1.5KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.14.24 (the latest release), from the OSV.dev database.

npq

v3.27.0 · 21 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

marshall your npm/npm package installs with high quality and class 🎖

5.8KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.27.0 (the latest release), from the OSV.dev database.

medici

v7.4.0 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Double-entry accounting ledger for Node + Mongoose

2.4KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v7.4.0 (the latest release), from the OSV.dev database.

@asavie/i18n

v99.0.3 · 3 months ago

92
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

SECURITY RESEARCH - Dependency confusion beacon-only PoC - Contact: [email protected]

50Downloads across all versions in the last 7 days, from the official npm downloads API.ISCLicense declared in the package manifest.

1 unknown

Known vulnerabilities affecting v99.0.3 (the latest release), from the OSV.dev database.

terracotta

v1.2.4 · 25 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Headless UI for SolidJS

203.7KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.2.4 (the latest release), from the OSV.dev database.

@y14e/disclosure

v2.0.16 · 2 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

WAI-ARIA compliant disclosure pattern implementation in TypeScript

875Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.0.16 (the latest release), from the OSV.dev database.

@backstage/plugin-search

v1.7.8 · 17 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

The Backstage plugin that provides your backstage app with search

67.9KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.7.8 (the latest release), from the OSV.dev database.

asavie-ui

v99.0.2 · 3 months ago

92
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

SECURITY RESEARCH - Dependency confusion beacon-only PoC - Contact: [email protected]

53Downloads across all versions in the last 7 days, from the official npm downloads API.ISCLicense declared in the package manifest.

1 unknown

Known vulnerabilities affecting v99.0.2 (the latest release), from the OSV.dev database.

url-sheriff

v2.0.0 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

validate and prevent against SSRF

1.8KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.0.0 (the latest release), from the OSV.dev database.

@aws-amplify/client-config

v1.11.1 · 5 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Responsible for translating stack outputs and metadata (read via the [deployed-backend-client](../deployed-backend-client/README.md)) into client config that can be consumed by the Amplify frontend libraries.

125.6KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.11.1 (the latest release), from the OSV.dev database.

@heroui/popover

v2.3.32 · 6 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A popover is an overlay element positioned relative to a trigger.

188.6KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.3.32 (the latest release), from the OSV.dev database.

@auth0/ai

v6.0.2 · 4 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Auth0AI SDK for JavaScript

241Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v6.0.2 (the latest release), from the OSV.dev database.

@deepseek-ai/dsh-client-ui-subagent

v0.0.1-rc.1 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Subagent conversation catalog, continuation routing UI, and '@' reference source

391.2KDownloads across all versions in the last 7 days, from the official npm downloads API.BSD-3-ClauseLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.0.1-rc.1 (the latest release), from the OSV.dev database.

@deepseek-ai/dsh-client-ui-workflow-run

v0.0.1-rc.2 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Durable workflow-run Conversation Node and nested member disclosure for dsh web

391.0KDownloads across all versions in the last 7 days, from the official npm downloads API.BSD-3-ClauseLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.0.1-rc.2 (the latest release), from the OSV.dev database.