a public repository, read by nittim
colorjs/color-name security audit
What nittim read in this repository, and what it found. Public repository, public reading — sourced from its own code and dependency manifests, nothing else.
A JSON with CSS color names
JavaScript · 127 stars · last push July 22, 2026
colorjs/color-name is a JavaScript repository that provides a JSON file containing CSS color names. The project serves as a reference resource for color naming conventions used in web development and design applications.
Nittim scanned 6 files and read all 6 of them. The scan found no committed credentials on production paths, no vulnerable runtime dependencies, and no vulnerable packages. There were no deterministic findings.
To maintain this result, rescan the repository after making any changes to dependencies or configuration. If vulnerabilities are discovered in the future, run an audit to understand the specific issues and determine appropriate remediation steps.
Written from nittim's own scan on November 6, 2026; rescanned when the repository changes.
No verdict. The rule-based check reports hard evidence, or reports that it found none. Neither is a judgment on whether this code is safe to ship.
What was read — rule-based scan
Rule-based checks run on nittim's servers — a secret scanner and a dependency check, no model in the path. The code reached those two and stopped there.
Read 6 of 6 eligible files. Commit 9ec3195. 2026-11-06.
What the scanners found
- Committed secrets on production paths
- 0
- Vulnerable runtime dependencies
- 0
Run it yourself
Scan any public repository in seconds — no sign-in, no card. Audit it to have a model read the code. Loop the report into your assistant to get the fixes applied and re-checked.
Scan your own repoQuestions
- What did nittim read in colorjs/color-name?
- nittim read 6 of 6 eligible files in colorjs/color-name. The reading ran on November 6, 2026. It was taken at commit 9ec3195.
- Did nittim find committed secrets or vulnerable dependencies in colorjs/color-name?
- The rule-based scan found 0 committed secrets and 0 vulnerable dependencies in colorjs/color-name. No vulnerable dependency was found by the rule-based scan. A scan that finds nothing has found nothing; it is not a guarantee.
- Is colorjs/color-name production ready?
- A free scan is not a verdict. A full audit gives one.
More like this
More JavaScript repositories →
Add the badge to your README
[](https://nittim.com/library/colorjs/color-name)