20,706 packages matching policy-violation

csp_evaluator

v1.1.8 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Evaluate Content Security Policies for a wide range of bypasses and weaknesses

3.9MDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.1.8 (the latest release), from the OSV.dev database.

@base-ui/react

v1.7.0 · 8 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Base UI is a library of headless ('unstyled') React components and low-level hooks. You gain complete control over your app's CSS and accessibility features.

9.5MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.7.0 (the latest release), from the OSV.dev database.

@urql/exchange-request-policy

v2.0.0 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

An exchange for operation request-policy upgrading in urql

44.5KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.0.0 (the latest release), from the OSV.dev database.

oci-common

v2.139.1 · 19 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

OCI Common module for NodeJS

290.4KDownloads across all versions in the last 7 days, from the official npm downloads API.(UPL-1.0 OR Apache-2.0)License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.139.1 (the latest release), from the OSV.dev database.

@cacheable/memory

v2.2.0 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

High Performance In-Memory Cache for Node.js

7.2MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.2.0 (the latest release), from the OSV.dev database.

@github/stable-socket

v1.1.1 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A web socket that reconnects.

2.1KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.1.1 (the latest release), from the OSV.dev database.

lws-cors

v4.2.1 · 2 years ago

90
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Support for setting Cross-Origin Resource Sharing (CORS) headers to lws

111.1KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.2.1 (the latest release), from the OSV.dev database.

@hint/hint-no-html-only-headers

v3.0.23 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

hint that that checks if HTML document only response headers are sent for other resources

18.1KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.0.23 (the latest release), from the OSV.dev database.

@angular-eslint/builder

v22.1.0 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Angular CLI builder for ESLint

2.7MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v22.1.0 (the latest release), from the OSV.dev database.

@wiris/mathtype-html-integration-devkit

v1.17.15 · 5 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Allows to integrate MathType Web into any JavaScript HTML WYSIWYG rich text editor.

13.9KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.17.15 (the latest release), from the OSV.dev database.

@aws-sdk/client-accessanalyzer

v3.1108.0 · 15 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

AWS SDK for JavaScript Accessanalyzer Client for Node.js, Browser and React Native

107.6KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.1108.0 (the latest release), from the OSV.dev database.

eslint-config-jquery

v3.0.2 · 2 years ago

90
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

jQuery eslint config

10.6KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.0.2 (the latest release), from the OSV.dev database.

permissions-policy

v0.6.0 · 5 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Middleware to set the Permissions-Policy HTTP header

15.9KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.6.0 (the latest release), from the OSV.dev database.

@ua-parser-js/pro-business

v2.0.10 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent & Client Hints data. Supports browser & node.js environment

110.5KDownloads across all versions in the last 7 days, from the official npm downloads API.SEE LICENSE IN LICENSE.mdLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.0.10 (the latest release), from the OSV.dev database.

lavamoat

v11.1.4 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

`lavamoat` is a NodeJS runtime where modules are defined in [SES][SesGithub] Compartments. It aims to reduce the risk of malicious code in the app dependency graph, known as "software supply chain attacks".

19.0KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v11.1.4 (the latest release), from the OSV.dev database.

@cdklabs/cdk-verified-permissions

v0.3.5 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

L2 AWS CDK Constructs for Amazon Verified Permissions

35.2KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.3.5 (the latest release), from the OSV.dev database.

oci-workrequests

v2.139.1 · 19 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

OCI NodeJS client for WorkRequests

246.4KDownloads across all versions in the last 7 days, from the official npm downloads API.(UPL-1.0 OR Apache-2.0)License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.139.1 (the latest release), from the OSV.dev database.

@anysphere/policy-watcher

v1.3.2-cursor.2 · 9 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

[![Build Status](https://dev.azure.com/monacotools/Monaco/_apis/build/status/npm/vscode/policy-watcher?repoName=microsoft%2Fvscode-policy-watcher&branchName=main)](https://dev.azure.com/monacotools/Monaco/_build/latest?definitionId=459&repoName=microsoft%

34.8KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.3.2-cursor.2 (the latest release), from the OSV.dev database.

@pnpm/config.version-policy

v1100.1.12 · 8 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Parses and evaluates package version policy specs and produces package-version matchers

18.5KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1100.1.12 (the latest release), from the OSV.dev database.

@gravitee/ui-policy-studio-angular

v17.9.1 · 8 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Gravitee.io - UI Policy Studio Angular

7.1KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v17.9.1 (the latest release), from the OSV.dev database.