safe-chain

Block malicious packages during npm/pip install

AikidoSec/safe-chain · Software Composition Analysis (SCA) · scanned 1.5.27 (released 2026-10-30) · commit 1c37c007d2b6 · last scan 2026-11-02

The scan method changed on 2026-11-02. npm development dependencies and npm-shrinkwrap.json are now scanned; matches on GitHub Actions referenced by a moving tag and on npm packages the repository defines itself are no longer counted; directories such as integration-tests and test-fixtures are excluded as fixtures. Most differences from the previous week below come from that change, not from the projects. Details.

Changes since last week

273 added; 15 new advisories; 1 resolved.

Added (273)

@aikidosec/safe-chain@1.0.0, @aikidosec/safe-chain@UNKNOWN, @aikidosec/safe-chain-e2e-tests@1.0.0, @aikidosec/safe-chain-e2e-tests@UNKNOWN, @babel/code-frame@7.29.7, @babel/generator@7.29.8, @babel/helper-globals@7.29.7, @babel/helper-string-parser@7.29.11, @babel/helper-validator-identifier@7.29.7, @babel/parser@7.29.11, @babel/template@7.29.7, @babel/traverse@7.29.10, @babel/types@7.29.11, @esbuild/aix-ppc64@0.27.0, @esbuild/aix-ppc64@0.28.2, @esbuild/android-arm@0.27.0, @esbuild/android-arm@0.28.2, @esbuild/android-arm64@0.27.0, @esbuild/android-arm64@0.28.2, @esbuild/android-x64@0.27.0, @esbuild/android-x64@0.28.2, @esbuild/darwin-arm64@0.27.0, @esbuild/darwin-arm64@0.28.2, @esbuild/darwin-x64@0.27.0, @esbuild/darwin-x64@0.28.2, @esbuild/freebsd-arm64@0.27.0, @esbuild/freebsd-arm64@0.28.2, @esbuild/freebsd-x64@0.27.0, @esbuild/freebsd-x64@0.28.2, @esbuild/linux-arm@0.27.0, @esbuild/linux-arm@0.28.2, @esbuild/linux-arm64@0.27.0, @esbuild/linux-arm64@0.28.2, @esbuild/linux-ia32@0.27.0, @esbuild/linux-ia32@0.28.2, @esbuild/linux-loong64@0.27.0, @esbuild/linux-loong64@0.28.2, @esbuild/linux-mips64el@0.27.0, @esbuild/linux-mips64el@0.28.2, @esbuild/linux-ppc64@0.27.0, @esbuild/linux-ppc64@0.28.2, @esbuild/linux-riscv64@0.27.0, @esbuild/linux-riscv64@0.28.2, @esbuild/linux-s390x@0.27.0, @esbuild/linux-s390x@0.28.2, @esbuild/linux-x64@0.27.0, @esbuild/linux-x64@0.28.2, @esbuild/netbsd-arm64@0.27.0, @esbuild/netbsd-arm64@0.28.2, @esbuild/netbsd-x64@0.27.0, @esbuild/netbsd-x64@0.28.2, @esbuild/openbsd-arm64@0.27.0, @esbuild/openbsd-arm64@0.28.2, @esbuild/openbsd-x64@0.27.0, @esbuild/openbsd-x64@0.28.2, @esbuild/openharmony-arm64@0.27.0, @esbuild/openharmony-arm64@0.28.2, @esbuild/sunos-x64@0.27.0, @esbuild/sunos-x64@0.28.2, @esbuild/win32-arm64@0.27.0, @esbuild/win32-arm64@0.28.2, @esbuild/win32-ia32@0.27.0, @esbuild/win32-ia32@0.28.2, @esbuild/win32-x64@0.27.0, @esbuild/win32-x64@0.28.2, @isaacs/fs-minipass@4.0.1, @jridgewell/gen-mapping@0.3.13, @jridgewell/resolve-uri@3.1.2, @jridgewell/sourcemap-codec@1.5.5, @jridgewell/trace-mapping@0.3.31, @npmcli/agent@4.0.0, @npmcli/fs@5.0.0, @npmcli/redact@4.0.0, @oxlint/darwin-arm64@1.22.0, @oxlint/darwin-x64@1.22.0, @oxlint/linux-arm64-gnu@1.22.0, @oxlint/linux-arm64-musl@1.22.0, @oxlint/linux-x64-gnu@1.22.0, @oxlint/linux-x64-musl@1.22.0, @oxlint/win32-arm64@1.22.0, @oxlint/win32-x64@1.22.0, @roberts_lando/vfs@0.3.3, @types/ini@4.1.1, @types/make-fetch-happen@10.0.4, @types/node@18.19.130, @types/node@24.9.2, @types/node-fetch@2.6.13, @types/node-forge@1.3.14, @types/npm-package-arg@6.1.4, @types/npm-registry-fetch@8.0.9, @types/npmlog@7.0.0, @types/retry@0.12.5, @types/semver@7.7.1, @types/ssri@7.1.5, @yao-pkg/pkg@6.24.0, @yao-pkg/pkg-fetch@3.6.7, agent-base@7.1.3, aikido-safe-chain-workspace@UNKNOWN, ansi-regex@5.0.1, ansi-styles@4.3.0, asynckit@0.4.0, b4a@1.9.0, balanced-match@4.0.4, bare-events@2.9.2, bare-fs@4.8.4, bare-path@3.1.2, bare-stream@2.13.4, bare-url@2.5.5, base64-js@1.5.1, bl@4.1.0, bluebird@3.7.2, brace-expansion@5.0.12, buffer@5.7.1, cacache@20.0.3, call-bind-apply-helpers@1.0.2, chalk@5.4.1, chownr@1.1.4, chownr@3.0.0, cliui@7.0.4, color-convert@2.0.1, color-name@1.1.4, combined-stream@1.0.8, commander@9.5.0, core-util-is@1.0.3, debug@4.4.0, decompress-response@6.0.0, deep-extend@0.6.0, delayed-stream@1.0.0, detect-libc@2.1.2, dunder-proto@1.0.1, duplexer2@0.1.4, emoji-regex@8.0.0, encoding@0.1.13, end-of-stream@1.4.5, err-code@2.0.3, es-define-property@1.0.1, es-errors@1.3.0, es-object-atoms@1.1.1, es-set-tostringtag@2.1.0, esbuild@0.27.0, esbuild@0.28.2, escalade@3.2.0, events-universal@1.0.1, expand-template@2.0.3, fast-fifo@1.3.2, fdir@6.5.0, form-data@4.0.6, fs-constants@1.0.0, fs-extra@11.3.2, fs-minipass@3.0.3, function-bind@1.1.2, get-caller-file@2.0.5, get-intrinsic@1.3.0, get-proto@1.0.1, github-from-package@0.0.0, glob@13.0.0, gopd@1.2.0, graceful-fs@4.2.11, has-symbols@1.1.0, has-tostringtag@1.0.2, hasown@2.0.2, hasown@2.0.4, hosted-git-info@9.0.2, http-cache-semantics@4.3.0, http-proxy-agent@7.0.2, https-proxy-agent@7.0.6, iconv-lite@0.6.3, ieee754@1.2.1, imurmurhash@0.1.4, inherits@2.0.4, ini@1.3.8, ini@6.0.0, into-stream@9.1.0, ip-address@10.7.3, is-core-module@2.16.1, is-fullwidth-code-point@3.0.0, isarray@1.0.0, js-tokens@4.0.0, jsesc@3.1.0, jsonfile@6.2.0, jsonparse@1.3.1, lru-cache@11.2.2, make-fetch-happen@15.0.3, math-intrinsics@1.1.0, mime-db@1.52.0, mime-types@2.1.35, mimic-response@3.1.0, minimatch@10.2.5, minimist@1.2.8, minipass@3.3.6, minipass@7.1.2, minipass-collect@2.0.1, minipass-fetch@5.0.0, minipass-flush@1.0.5, minipass-pipeline@1.2.4, minipass-sized@1.0.3, minizlib@3.1.0, mkdirp-classic@0.5.3, ms@2.1.3, multistream@4.1.0, nan@2.23.0, napi-build-utils@2.0.0, negotiator@1.0.0, node-abi@3.85.0, node-forge@1.4.0, node-int64@0.4.0, node-pty@1.0.0, npm-package-arg@13.0.2, npm-registry-fetch@19.1.1, once@1.4.0, oxlint@1.22.0, p-map@7.0.4, path-parse@1.0.7, path-scurry@2.0.1, picocolors@1.1.1, picomatch@4.0.7, postject@1.0.0-alpha.6, prebuild-install@7.1.3, proc-log@6.1.0, process-nextick-args@2.0.1, progress@2.0.3, promise-retry@2.0.1, pump@3.0.3, rc@1.2.8, readable-stream@2.3.8, readable-stream@3.6.2, require-directory@2.1.1, resolve@1.22.11, resolve.exports@2.0.4, retry@0.12.0, safe-buffer@5.1.2, safer-buffer@2.1.2, semver@7.7.2, simple-concat@1.0.1, simple-get@4.0.1, smart-buffer@4.2.0, socks@2.8.7, socks-proxy-agent@8.0.5, ssri@13.0.0, stream-meter@1.0.4, streamx@2.28.1, string-width@4.2.3, string_decoder@1.1.1, strip-ansi@6.0.1, strip-json-comments@2.0.1, supports-preserve-symlinks-flag@1.0.0, tar@7.5.22, tar-fs@2.1.4, tar-fs@3.1.3, tar-stream@2.2.0, tar-stream@3.2.2, teex@1.0.1, text-decoder@1.2.7, tinyglobby@0.2.15, tunnel-agent@0.6.0, typescript@5.9.3, undici@7.30.1, undici-types@5.26.5, undici-types@7.16.0, unique-filename@5.0.0, unique-slug@6.0.0, universalify@2.0.1, unzipper@0.12.3, util-deprecate@1.0.2, validate-npm-package-name@7.0.0, wrap-ansi@7.0.0, wrappy@1.0.2, y18n@5.0.8, yallist@4.0.0, yallist@5.0.0, yaml@2.9.1, yargs@16.2.2, yargs-parser@20.2.9

New advisories (15)

• M GHSA-3g3m-2fjr-6pw4 in glob@13.0.0
• L GHSA-4487-j8r4-4g2f in node-forge@1.4.0
• L GHSA-4642-5mcj-2rqw in node-forge@1.4.0
• M GHSA-525v-9gp9-w22h in node-forge@1.4.0
• M GHSA-5cwg-6vw7-rj6p in node-forge@1.4.0
• H GHSA-5x38-2vff-x55p in node-forge@1.4.0
• M GHSA-6wvx-3r32-xmcg in node-forge@1.4.0
• H GHSA-7wch-p9px-956x in node-forge@1.4.0
• H GHSA-86w9-cpqp-85rv in node-forge@1.4.0
• H GHSA-8hrf-8g6f-7xwp in node-forge@1.4.0
• M GHSA-g3hv-75wg-m249 in minimatch@10.2.5
• L GHSA-h6cr-wjv9-3cpp in node-forge@1.4.0
• H GHSA-hqq3-7jhf-c5jx in node-forge@1.4.0
• H GHSA-jc66-7q78-782g in node-forge@1.4.0
• M GHSA-rxp7-6hxx-x8q5 in ip-address@10.7.3

Resolved advisories (1)

• H GHSA-cxww-7g56-2vh6 in actions/download-artifact@v4

Known vulnerabilities (15)

Vulnerabilities are known advisories that Grype matches against the dependencies declared in each project's release source (manifests and lockfiles, including development and build dependencies). A match does not mean the tool is exploitable: the vulnerable code may be unused, test-only, or not shipped in the released binary. OSV: also reported by OSV-Scanner. Released binary: for Go tools, whether govulncheck found the vulnerable code in the shipped Linux binary. KEV: listed in the CISA Known Exploited Vulnerabilities catalog. EPSS: FIRST's estimated probability of exploitation in the next 30 days. Both describe the vulnerability in general, not its exploitability through this tool; a match in a workflow file refers to a GitHub Action, not to shipped code. Select an advisory for every catalog tool it matches. If a match is wrong or does not apply, use Dispute; accepted disputes are annotated here and listed on the corrections page, and the match stays visible.

Not counted: 1 match (action reference to a moving tag or branch). Neither identifies a version installed from a registry.

Second opinion: OSV-Scanner

OSV-Scanner found 15 advisories in the same files; 15 of Grype's matches are confirmed by it (marked ✓ above). 0 advisories were reported only by OSV-Scanner.

Release integrity

Verdict: verified for safe-chain-linux-x64. The download matches GitHub's recorded digest.

• Checksums file: no
• Signatures: no
• SLSA provenance: no
• SBOM published with the release: no

Verified means a signature, provenance, or attestation was checked against an identity in AikidoSec/safe-chain's own GitHub Actions workflows.

Repository security (OpenSSF Scorecard)

Score 4.5/10, assessed 2026-11-02 (Scorecard CLI run by this workflow). Scorecard viewer

GitHub Actions workflow audit (zizmor)

27 potential issues in 4 workflow files at this release: 18 high, 7 medium, 2 low severity (medium or high confidence only). Each is a pattern to review, not a confirmed vulnerability.

Dependencies (280)

By ecosystem: npm 273, github 6, unknown 1.

Licenses (as declared in the SBOM): MIT 166, unknown 52, ISC 37, Apache-2.0 10, BlueOak-1.0.0 6, AGPL-3.0-or-later 3, BSD-3-Clause 2, MIT OR WTFPL 1, BSD-2-Clause 1, BSD-3-Clause OR GPL-2.0 1, BSD-2-Clause OR MIT OR Apache-2.0 1.

History

SBOM minimum elements

Scored by sbomlyze on the generated source SBOM. A source SBOM usually lacks supplier and hash data, so these scores mostly reflect what the project's manifests declare.

Evidence

Downloads for this week: CycloneDX SBOM · Grype report · sbomlyze diff from last week

Permanent copy of the raw SBOM, Grype, OSV-Scanner, and govulncheck output and release checks: release report-2026-11-02, folder supply-chain-shard-*/AikidoSec__safe-chain/.

Full JSON for this project · Atom feed of weekly changes

Badges

shields.io endpoints refreshed with each weekly scan. They report this week's result for the latest release, nothing more.

[![release verification](https://img.shields.io/endpoint?url=https%3A%2F%2Frezmoss.github.io%2Fawesome-security-pipeline%2Fbadges%2FAikidoSec%2Fsafe-chain%2Frelease.json)](https://rezmoss.github.io/awesome-security-pipeline/projects/AikidoSec/safe-chain/index.html)

How this report is made

Every Sunday a GitHub Actions workflow resolves each catalog tool to its latest release and runs the checks below. Every tool is installed from its own latest release and verified against its published checksum or digest. Nothing from the scanned projects is built or executed; release binaries are analyzed as files.