Akka Http: Modern, fast, asynchronous, streaming-first HTTP server and client.
68%
Total Score
caution
Usable with caveats: no registry release in about three years despite an active source repository.
The registry shows 33 releases but none in the last 12 months, with the latest registry release about three years ago; this is a meaningful release-maintenance concern despite recent repository activity.
The repository name does not match this artifact and its README does not mention the package, so the linkage is less transparent; the mismatch may also reflect a monorepo submodule.
The project uses sbt, but no security-scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.
The assessed version is a milestone release while the reported latest version is 10.5.3 and the recent prerelease share is 30%, so consumers should expect less stability than a mature stable release.
All eight workflows were analyzed and use read-only permissions, with no untrusted checkout or script-injection findings. However, 42 of 43 action references are unpinned; the two low-confidence cache-poisoning findings are hygiene concerns rather than standalone severe risks.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10490 akka-http_2.13 is vulnerable to Improper Access Control in versions 3.0.0 - 10.5.1. | 3.0.0 - 10.5.1 | Medium |
AIKIDO-2024-10489 akka-http_2.13 is vulnerable to Denial of Service (DoS) in versions 3.0.0 - 10.5.2. | 3.0.0 - 10.5.2 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
org.scala-lang:scala-library Version 2.13.12 | — | — |
com.typesafe.akka:akka-http-core_2.13 Version 10.6.0-M1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.