Is Semantic Release Contributors Safe?

Semantic Release Contributors — Nerq Trust Score 48.2/100 (D grade). Score based on 2 independent trust signals. Last analyzed: 2026-03-25

Semantic Release Contributors is a npm package with a Nerq Trust Score of 48.2/100 (D), based on 3 independent data dimensions. Last analyzed: 2026-03-25 Security: 90/100. Popularity: 0/100. Data sourced from npm registry, GitHub repository, NVD, OSV.dev, and OpenSSF Scorecard. Last updated: 2026-03-25. Machine-readable data (JSON).

Is Semantic Release Contributors safe?

Trust Score Breakdown — Semantic Release Contributors has a Nerq Trust Score of 48.2/100 (D). Measured across 2 independent trust signals (as of 2026-03-25).

Security Analysis → Semantic Release Contributors Privacy Report →

What is Semantic Release Contributors's trust score?

Semantic Release Contributors has a Nerq Trust Score of 48.2/100, earning a D grade. This score is based on 2 independently measured dimensions including security, maintenance, and community adoption.

Security
90
Popularity
0

What are the key security findings for Semantic Release Contributors?

Semantic Release Contributors's strongest signal is security at 90/100. No known vulnerabilities have been detected.

✓Security score: 90/100 (strong)
⚠Popularity: 0/100 — community adoption

What is Semantic Release Contributors and who maintains it?

Authorflosch
Categorynpm Packages
SourceN/A

Semantic Release Contributors Across Platforms

Same developer/company in other registries:

github.com/flosch/pongo2-addons
46/100 · go
gopkg.in/flosch/pongo2.v3
46/100 · go
github.com/flosch/pongo2
46/100 · go
github.com/flosch/go-humanize
46/100 · go

Similar Npm by Trust Score

react-library-boilerplate-for-npm (58)bindler (58)@yassidev/nuxt-directus (58)spectro-kubernetes-client (58)pocketto-svelte (58)
See all safest Npm →

Compare

Semantic Release Contributors vs react-library-boilerplate-for-npmSemantic Release Contributors vs bindlerSemantic Release Contributors vs @yassidev/nuxt-directus

Safety Guide: Semantic Release Contributors

What is Semantic Release Contributors?

Semantic Release Contributors is a Node.js package — semantic-release plugin to automatically update contributors list from git history.

How to Verify Safety

Run npm audit to check for vulnerabilities. Review the package's GitHub repository for recent commits.

You can also check the trust score via API: GET /v1/preflight?target=semantic-release-contributors

Key Safety Concerns for Node.js package

When evaluating any Node.js package, watch for: dependency vulnerabilities, malicious packages, typosquatting.

Measured Signals

Semantic Release Contributors has a Nerq Trust Score of 48/100 (D). This score is a composite of automated measurements of security, maintenance, community, and quality signals.

Key Takeaways

Frequently Asked Questions

Is Semantic Release Contributors Safe?
semantic-release-contributors with a Nerq Trust Score of 48.2/100 (D). Strongest signal: security (90/100). Score based on Security (90/100), Popularity (0/100).
What is Semantic Release Contributors's trust score?
semantic-release-contributors: 48.2/100 (D). Score based on Security (90/100), Popularity (0/100). Scores update as new data becomes available. API: GET nerq.ai/v1/preflight?target=semantic-release-contributors
What are safer alternatives to Semantic Release Contributors?
In the npm Packages category, more Node.js packages are being analyzed — check back soon. semantic-release-contributors scores 48.2/100.
Does Semantic Release Contributors have known vulnerabilities?
Nerq checks Semantic Release Contributors against NVD, OSV.dev, and registry-specific vulnerability databases. Current security score: 90/100. Run your package manager's audit command for the latest findings.
Is Semantic Release Contributors actively maintained?
Semantic Release Contributors maintenance score: N/A. Check the repository for recent commit activity and issue responsiveness.
API: /v1/preflight Trust Badge API Docs

See Also

Disclaimer: Nerq trust scores are automated measurements based on publicly available signals. They are not endorsements, verdicts, or guarantees of suitability. Always evaluate the signals against your own requirements.

We use cookies for analytics and caching. Privacy