{"package":"ember-headless-form-yup","ecosystem":"npm","latest_version":"1.0.0","description":"Integrates yup-based validations with ember-headless-form","license":"MIT","homepage":"https://github.com/CrowdStrike/ember-headless-form#readme","repository":"https://github.com/CrowdStrike/ember-headless-form","downloads_weekly":278,"health":{"score":40,"risk":"high","breakdown":{"maintenance":0,"popularity":3,"security":25,"maturity":9,"community":3},"deprecated":false,"max_score":100},"vulnerabilities":{"count":1,"critical":0,"high":0,"medium":0,"low":1,"details":[{"vuln_id":"GHSA-4wfh-h4hf-h6rv","severity":"unknown","summary":"Malicious code in ember-headless-form-yup (npm)","affected_versions":null,"fixed_version":null,"source":"osv","published_at":"2025-09-16T07:51:34Z"}],"actively_exploited_count":0,"likely_exploited_count":0},"versions":{"latest":"1.0.0","total_count":2,"recent":["1.0.0-beta.0","1.0.0"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":2,"first_published":"2023-03-03T16:11:33.694Z","last_published":"2023-12-18T17:59:03.790Z","dependencies_count":2,"dependencies":["@embroider/addon-shim","ember-functions-as-helper-polyfill"]},"bundle":null,"typescript":{"score":0,"has_types":false,"types_source":null,"types_package":null},"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"recommendation":{"action":"do_not_use","summary":"Do not install. Package is flagged as malicious (advisory MAL-2025-47308).","version_hint":null},"requested_version":null,"_cache":"miss","_response_ms":953,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":true,"advisory_id":"MAL-2025-47308","summary":"Malicious code in ember-headless-form-yup (npm)","action":"do_not_install","downloads_weekly_at_check":278},"scorecard":{"available":false},"quality":{"available":false}}