Vercel Security & compliance Code quality

Large number of pending invites

Part of the Account supply chain check · fix arrives as a guide

What it is

The team has a significant number of invitations that have been pending for a long time.

Why it matters

A pending invite is a standing offer of access to whatever address it was sent to. If that address is wrong, no longer controlled by the person, or a shared alias, accepting it grants team access to whoever reads it.

How to fix it

Revoke invitations that have gone unaccepted, and re-send only the ones still needed after confirming the address. Set a habit of clearing the pending list periodically.

Run them all on your app

Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.