Trust Engine/Software Library

mtth/avsc

Avro for JavaScript :zap:

1,381 starsJavaScriptMITavroserializationjavascripttypescript
REVIEWED88/100

Scanned 2026-07-13 · deepseek v1

Dimension breakdown

Security

85/100

3 findings

Quality

85/100

No findings

License

95/100

No findings

Completeness

90/100

No findings

Findings (3)

MEDIUM: 1LOW: 1INFO: 1
  • MEDIUMsecurityPotential Prototype Pollution via Schema Parsing
  • LOWsecurityUse of `eval` or `new Function` Not Detected but Possible in Dynamic Code Generation
  • INFOsecurityDependency on Older Node.js Versions

Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.

Maintainer of this repo?

Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.

Claim listing

Embed the badge.

Drop it into your README. Every view backlinks to this verification page.

Trust badge — flat styleTrust badge — for-the-badge style

Markdown

[![Archimedes Trust](https://archimedes.market/api/badge/mtth/avsc.svg)](https://archimedes.market/r/mtth/avsc)

HTML

<a href="https://archimedes.market/r/mtth/avsc"><img src="https://archimedes.market/api/badge/mtth/avsc.svg" alt="Archimedes Trust Verified"/></a>

Similar Software Library repos

Browse all

command-exists

mathisonian

88
REVIEWEDSoftware

caseless

mikeal

88
REVIEWEDSoftware

language-tools

vuejs

88
REVIEWEDSoftware

mcp-server-ipinfo

briandconnelly

87
REVIEWEDSoftware

chess-mcp

pab1it0

87
REVIEWEDSoftware

lottie-react

Gamote

87
REVIEWEDSoftware

Browse bounties

Find paid engineering work matching this skill set

Verify another repo

Free, 30 seconds

MCP integration

Surface bounties + verified engineers via MCP

This report is generated automatically from public code and may be wrong. Maintainer? Request a re-scan or removal.