Openui AI Agent
by thesysdevThe Open Standard for Generative UI
Openui is an open-source ai agent by thesysdev, written mainly in TypeScript, with 14,595 GitHub stars and the MIT license. Its code was last updated Oct 31, 2026.
Scan summary: scanned Nov 5, 2026 at commit 56122b9. No capabilities flagged by our checks. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
56122b9 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings. BuildsIt installed from a fresh machine.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit1158 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Passed. This check ran and found nothing it flags.BuildpassPassed. This check ran and found nothing it flags.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (125)
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Very long encoded string literal. Often used to hide a payload.
packages/devtools/src/ui/inter/font-data.ts:6 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.adm-zip@0.5.18: 8 known vulnerabilitiesGHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
examples/agent-frameworks/google-adk/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mariadb@3.4.5: 7 known vulnerabilitiesGHSA-42r5-vhpq-m858, GHSA-48qf-xh34-q73r, GHSA-cqhc-2h57-wpxf, GHSA-cx2f-j9fh-8g68, GHSA-g5xc-5w98-jfvm +2 more
examples/agent-frameworks/google-adk/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mysql2@3.20.0: 2 known vulnerabilitiesGHSA-3f6p-5ww8-9rcr, GHSA-rgwj-5xj2-c3m3
examples/agent-frameworks/google-adk/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
examples/agent-frameworks/google-adk/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 45 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5 +40 more
examples/agent-frameworks/google-adk/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@azure/msal-node@5.6.0: 1 known vulnerabilityGHSA-xcx6-jx8p-x3h5
examples/agent-frameworks/google-adk/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.6: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-27r3-jxmh-p828
examples/agent-frameworks/google-adk/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.3.0: 5 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-27r3-jxmh-p828, GHSA-27r3-jxmh-p828, GHSA-27r3-jxmh-p828, GHSA-27r3-jxmh-p828
examples/agent-frameworks/google-adk/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.5.4: 15 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5 +10 more
examples/agent-frameworks/google-adk/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.extract-zip@2.0.1: 4 known vulnerabilitiesGHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv, GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv
examples/agent-frameworks/langgraph-platform/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.18: 39 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr +34 more
examples/agent-frameworks/langgraph-platform/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.9: 42 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr +37 more
examples/agent-frameworks/langgraph-platform/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 23 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q +18 more
examples/agent-frameworks/langgraph-platform/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@fastify/busboy@2.1.1: 2 known vulnerabilitiesGHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx
examples/agent-frameworks/mastra/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.graphql-scalars@1.26.0: 2 known vulnerabilitiesGHSA-x8rm-f576-gq67, GHSA-x8rm-f576-gq67
examples/agent-frameworks/mastra/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@5.29.0: 16 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +11 more
examples/agent-frameworks/mastra/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@azure/msal-node@5.1.5: 1 known vulnerabilityGHSA-xcx6-jx8p-x3h5
examples/agent-frameworks/mastra/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@graphql-tools/utils@11.2.2: 2 known vulnerabilitiesGHSA-7mx3-vvmw-hjmv, GHSA-c4qx-w738-7hr3
examples/agent-frameworks/mastra/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@graphql-tools/utils@12.0.0: 2 known vulnerabilitiesGHSA-7mx3-vvmw-hjmv, GHSA-c4qx-w738-7hr3
examples/agent-frameworks/mastra/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.30.0: 18 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +13 more
examples/agent-frameworks/mastra/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/server@2.0.0: 4 known vulnerabilitiesGHSA-46jr-4wx8-v453, GHSA-f897-62hf-6gxq, GHSA-jm63-cq47-j5jp, GHSA-rvq5-wwqv-78pq
examples/agent-frameworks/mastra/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.6: 7 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-58mr-gqgx-xq4g, GHSA-hrr3-gc8f-f4qj, GHSA-qw65-cvwx-89v3, GHSA-w74x-v6f9-j3xg +2 more
examples/agent-frameworks/mastra/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 3 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
examples/agent-frameworks/mastra/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@6.28.0: 64 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm +59 more
examples/agent-frameworks/mastra/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.75: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
examples/agent-frameworks/mastra/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.1.11: 4 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
examples/agent-frameworks/vercel-eve/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.4.3: 9 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5 +4 more
examples/agent-frameworks/vercel-eve/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@angular/router@22.1.7: 3 known vulnerabilitiesGHSA-57xq-rjx2-v5xh, GHSA-62vg-58rm-qff7, GHSA-ff3f-86qr-9cv3
examples/app-frameworks/angular/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@8.1.5: 5 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
examples/app-frameworks/angular/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.29.0: 18 known vulnerabilitiesGHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +13 more
examples/app-frameworks/fastapi/frontend/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@6.4.3: 15 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +10 more
examples/app-frameworks/fastapi/frontend/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.31: 36 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +31 more
examples/app-frameworks/react-native/backend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.image-size@1.2.1: 4 known vulnerabilitiesGHSA-5p2g-fcmc-qvqq, GHSA-w3rx-r6r6-pgpr, GHSA-5p2g-fcmc-qvqq, GHSA-w3rx-r6r6-pgpr
examples/app-frameworks/react-native/chat-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.49: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
examples/app-frameworks/react-native/chat-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.1.4: 6 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr +1 more
examples/app-frameworks/react-native/chat-app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.compression@1.8.1: 1 known vulnerabilityGHSA-vc2v-76pw-4v95
examples/app-frameworks/react-native/chat-app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.node-forge@1.4.0: 24 known vulnerabilitiesGHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p, GHSA-5x38-2vff-x55p +19 more
examples/app-frameworks/react-native/chat-app/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.devalue@5.9.2: 14 known vulnerabilitiesGHSA-4q55-j62x-fr9h, GHSA-hx4r-w6wj-j8fg, GHSA-j22f-vq7h-c4qm, GHSA-mcm9-63f2-9j32, GHSA-r9w8-h9r3-54w4 +9 more
examples/app-frameworks/svelte/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.launch-editor@2.14.1: 6 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv +1 more
examples/app-frameworks/vue/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.seroval@1.6.4: 5 known vulnerabilitiesGHSA-7rv5-mrxv-xcr9, GHSA-97r2-qh9m-474h, GHSA-9wx9-5pv9-3349, GHSA-f86p-h4j2-7qgj, GHSA-wp97-x4hv-qvhp
examples/app-frameworks/vue/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@7.3.6: 10 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +5 more
examples/app-frameworks/vue/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.34.5: 27 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w, GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c +22 more
examples/cookbooks/booking-assistant/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.30.1: 5 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-rvq5-wwqv-78pq
examples/cookbooks/booking-assistant/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.6.5: 4 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
examples/cookbooks/booking-assistant/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.3.1: 1 known vulnerabilityGHSA-2883-xcg3-v3hh
examples/harnesses/grok-build/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@8.2.2: 6 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +1 more
examples/harnesses/grok-build/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.6: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
examples/harnesses/pi/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@8.5.0: 46 known vulnerabilitiesGHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +41 more
examples/harnesses/pi/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.35.4: 1 known vulnerabilityGHSA-wq5f-xc86-pv6w
examples/miscellaneous/autofix/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@vue/server-renderer@3.5.40: 1 known vulnerabilityGHSA-g2v6-rqmx-r4w6
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.16: 5 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-rgw5-rvv9-x895
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.1.3: 4 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-rgw5-rvv9-x895
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.8: 4 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-rgw5-rvv9-x895
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.devalue@5.8.2: 8 known vulnerabilitiesGHSA-4q55-j62x-fr9h, GHSA-9rgm-9g3h-6x36, GHSA-hx4r-w6wj-j8fg, GHSA-j22f-vq7h-c4qm, GHSA-mcm9-63f2-9j32 +3 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.4: 11 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-5jgf-p345-68v8, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf +6 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.3.0: 2 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-5p4m-2wfm-xmqj
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 2 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.markdown-it@14.3.0: 4 known vulnerabilitiesGHSA-253c-mchw-3w2r, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.16: 1 known vulnerabilityGHSA-2v37-7h3g-55p8
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.prosemirror-view@1.42.2: 1 known vulnerabilityGHSA-c8x8-7fp4-3x9w
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@8.9.0: 36 known vulnerabilitiesGHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +31 more
templates/openui-cloud/overlays/vercel-eve/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
docs/app/(home)/openclaw-os/page.tsx:12 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
docs/app/debug/lib/versions/loader.ts:11 - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.27.4: 1 known vulnerabilityGHSA-g7r4-m6w7-qqqr
benchmarks/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.8.2: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
benchmarks/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@2.1.0: 1 known vulnerabilityGHSA-8988-4f7v-96qf
examples/agent-frameworks/google-adk/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@tootallnate/once@1.1.2: 1 known vulnerabilityGHSA-vpq2-c234-7xj6
examples/agent-frameworks/google-adk/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.47: 43 known vulnerabilitiesGHSA-238p-pmpm-9mq7, GHSA-238p-pmpm-9mq7, GHSA-238p-pmpm-9mq7, GHSA-238p-pmpm-9mq7, GHSA-238p-pmpm-9mq7 +38 more
examples/agent-frameworks/google-adk/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.6: 39 known vulnerabilitiesGHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249 +34 more
examples/agent-frameworks/google-adk/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@2.1.1: 5 known vulnerabilitiesGHSA-rmxm-3fg6-px4f, GHSA-rmxm-3fg6-px4f, GHSA-rmxm-3fg6-px4f, GHSA-rmxm-3fg6-px4f, GHSA-rmxm-3fg6-px4f
examples/agent-frameworks/google-adk/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 3 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
examples/agent-frameworks/google-adk/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 5 known vulnerabilitiesGHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249
examples/agent-frameworks/google-adk/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.qs@6.16.0: 4 known vulnerabilitiesGHSA-6pq8-jhm2-2vcw, GHSA-6pq8-jhm2-2vcw, GHSA-6pq8-jhm2-2vcw, GHSA-6pq8-jhm2-2vcw
examples/agent-frameworks/google-adk/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@1.19.18: 2 known vulnerabilitiesGHSA-rmxm-3fg6-px4f, GHSA-rmxm-3fg6-px4f
examples/agent-frameworks/langgraph-platform/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.hono@4.13.5: 4 known vulnerabilitiesGHSA-5r4p-p66f-jhc7, GHSA-hxh3-vqpv-xpqv, GHSA-5r4p-p66f-jhc7, GHSA-hxh3-vqpv-xpqv
examples/agent-frameworks/langgraph-platform/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@7.1.5: 2 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-rj75-hqrm-r3gf
examples/agent-frameworks/langgraph-platform/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@2.2.8: 2 known vulnerabilitiesGHSA-866g-f22w-33x8, GHSA-866g-f22w-33x8
examples/agent-frameworks/mastra/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@3.0.23: 2 known vulnerabilitiesGHSA-866g-f22w-33x8, GHSA-866g-f22w-33x8
examples/agent-frameworks/mastra/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@4.0.23: 2 known vulnerabilitiesGHSA-866g-f22w-33x8, GHSA-866g-f22w-33x8
examples/agent-frameworks/mastra/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@1.19.17: 1 known vulnerabilityGHSA-rmxm-3fg6-px4f
examples/agent-frameworks/mastra/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ip-address@10.7.0: 3 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rxp7-6hxx-x8q5
examples/agent-frameworks/mastra/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.qs@6.15.3: 6 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-x5fp-wj9c-mxmx, GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw +1 more
examples/agent-frameworks/mastra/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@5.0.0-beta.49: 2 known vulnerabilitiesGHSA-866g-f22w-33x8, GHSA-866g-f22w-33x8
examples/agent-frameworks/vercel-eve/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.fast-uri@3.1.8: 8 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h, GHSA-333x-w4r6-6crp +3 more
examples/app-frameworks/angular/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.hono@4.13.8: 1 known vulnerabilityGHSA-5r4p-p66f-jhc7
examples/app-frameworks/angular/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ip-address@10.7.2: 2 known vulnerabilitiesGHSA-rxp7-6hxx-x8q5, GHSA-rxp7-6hxx-x8q5
examples/app-frameworks/angular/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 9 known vulnerabilitiesGHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4 +4 more
examples/app-frameworks/react-native/chat-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.glob@13.0.6: 6 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4 +1 more
examples/app-frameworks/react-native/chat-app/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@sveltejs/kit@2.70.3: 4 known vulnerabilitiesGHSA-27mw-82g8-phjj, GHSA-pfhg-q3qv-9q6r, GHSA-27mw-82g8-phjj, GHSA-pfhg-q3qv-9q6r
examples/app-frameworks/svelte/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.cookie@0.6.0: 1 known vulnerabilityGHSA-pxg6-pf52-xh8x
examples/app-frameworks/svelte/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@nuxt/nitro-server@3.21.11: 2 known vulnerabilitiesGHSA-vjh5-4x84-xrqp, GHSA-vjh5-4x84-xrqp
examples/app-frameworks/vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@nuxt/vite-builder@3.21.11: 2 known vulnerabilitiesGHSA-648h-gw55-m2g7, GHSA-648h-gw55-m2g7
examples/app-frameworks/vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.nuxt@3.21.11: 6 known vulnerabilitiesGHSA-jjm6-p2m9-9w4x, GHSA-vjh5-4x84-xrqp, GHSA-xfq5-w38q-pc2x, GHSA-jjm6-p2m9-9w4x, GHSA-vjh5-4x84-xrqp +1 more
examples/app-frameworks/vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.serialize-javascript@7.1.1: 2 known vulnerabilitiesGHSA-gfhx-hw2g-v5hg, GHSA-m5mm-p8h7-m29v
examples/app-frameworks/vue/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.hono@4.13.10: 1 known vulnerabilityGHSA-5r4p-p66f-jhc7
examples/cookbooks/booking-assistant/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@4.1.11: 2 known vulnerabilitiesGHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp
examples/harnesses/grok-build/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.5: 2 known vulnerabilitiesGHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249
examples/harnesses/pi/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.protobufjs@7.6.4: 1 known vulnerabilityGHSA-j3f2-48v5-ccww
examples/harnesses/pi/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.moment@2.30.1: 2 known vulnerabilitiesGHSA-4p3w-j4w9-5jqw, GHSA-4p3w-j4w9-5jqw
examples/miscellaneous/handsontable/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@2.0.12: 1 known vulnerabilityGHSA-rmxm-3fg6-px4f
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@tiptap/core@2.27.2: 1 known vulnerabilityGHSA-cp6q-959q-f8rh
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@4.1.10: 2 known vulnerabilitiesGHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.hono@4.12.32: 9 known vulnerabilitiesGHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-79qm-7rj5-m7r9, GHSA-8j4g-w8fx-2239, GHSA-crvj-82cr-hjcx +4 more
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ip-address@10.3.1: 5 known vulnerabilitiesGHSA-2vr4-cq9g-pvrc, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.44: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.mermaid@11.16.0: 5 known vulnerabilitiesGHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6x64-9x62-f2gx, GHSA-c4c3-pg64-4m4v, GHSA-rhh3-jpg6-66xh
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.4: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.vitest@4.1.10: 1 known vulnerabilityGHSA-82fw-gwwq-j7x9
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Network activity
During install
nodejs.orgregistry.npmjs.org
While running
Not run — the code wasn't started in this scan
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Openui alternatives
View more →Similar ai agents in Design & Media, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Openui (this page) thesysdev | 15k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| Taste Skill Leonxlnx | 107k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| Archify tt-a1i | 92k | Apache-2.0 | Oct 31, 2026 | Scanned, no flagged issues |
| Hyperframes heygen-com | 77k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| OpenMontage calesthio | 74k | AGPL-3.0 | Oct 28, 2026 | Scanned, no flagged issues |
| CopilotKit CopilotKit | 38k | MIT | Oct 31, 2026 | Scanned, no flagged issues |