semver-tags

v0.4.10npm· JavaScript

Get semver tags for a repo (git or svn)

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityNiche

Security1 advisory

LicenseUnknown

DepsModerate

Maintenance

Last published 6 years ago.

Popularity

13 downloads / week

Security

1 known advisory (worst: high severity).

License

No license declared.

Dependencies

5 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
semver-tags is vulnerable to Command Injection via the getGitTagsRemote function
GHSA-8h3g-hcwp-6hxq Published 2023-02-06

Recent releases