Package Health

akka-http_2.13

Akka Http: Modern, fast, asynchronous, streaming-first HTTP server and client.

Latest 10.6.0-M1com.typesafe.akkaMavenMaven

68%

Total Score

caution

Usable with caveats: no registry release in about three years despite an active source repository.

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

The registry shows 33 releases but none in the last 12 months, with the latest registry release about three years ago; this is a meaningful release-maintenance concern despite recent repository activity.

Repo package mentioncaution

The repository name does not match this artifact and its README does not mention the package, so the linkage is less transparent; the mismatch may also reflect a monorepo submodule.

Repo toolingcaution

The project uses sbt, but no security-scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.

Version stabilitycaution

The assessed version is a milestone release while the reported latest version is 10.5.3 and the recent prerelease share is 30%, so consumers should expect less stability than a mature stable release.

Workflow auditcaution

All eight workflows were analyzed and use read-only permissions, with no untrusted checkout or script-injection findings. However, 42 of 43 action references are unpinned; the two low-confidence cache-poisoning findings are hygiene concerns rather than standalone severe risks.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2024-10490
akka-http_2.13 is vulnerable to Improper Access Control in versions 3.0.0 - 10.5.1.
3.0.0 - 10.5.1
Medium
AIKIDO-2024-10489
akka-http_2.13 is vulnerable to Denial of Service (DoS) in versions 3.0.0 - 10.5.2.
3.0.0 - 10.5.2
High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
org.scala-lang:scala-library
Version 2.13.12
—
—
com.typesafe.akka:akka-http-core_2.13
Version 10.6.0-M1
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform