yapi-vendor

v1.12.0npm· JavaScript

YAPI

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityNiche

Security1 advisory

LicensePermissive

DepsHeavy

Maintenance

Last published 3 years ago.

Popularity

332 downloads / week

Security

1 known advisory (worst: high severity).

License

Apache-2.0

Dependencies

55 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
yapi disables TLS/SSL certificate validation via rejectUnauthorized: false in Axios HTTPS agent
GHSA-663h-2vr3-ghrj Published 2026-02-23

Recent releases