As of 2026-10-27, shadcn (shadcn-ui/ui) has a security score of 0 (Critical), after human review.

shadcn shadcn-ui/ui

Score: 0/100 · Critical · critical 0 · high 5 · medium 125 · low 1

Review note: Socket：Warn；Gen/Snyk：Pass。命中：SkillSpector 记忆投毒、自我修改、读取代理配置目录等（自研引擎无命中）。

12.4 万 installs · ★ 12.7 万 · GitHub

Flags are automatic signals from public data ("suspected"), not accusations. High-risk results are published after human review. Back to index