gRPC: OkHttp
88%
Total Score
healthy
Active, mature project with signed releases; its main weakness is that all 15 workflow actions are unpinned.
The project uses Gradle and Maven, but no security scanning tools were detected. This is a modest transparency and hygiene gap, not evidence of abandonment or unsafe code.
All four workflows were analyzed with no failed files, dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 15 action references are unpinned and one workflow grants top-level write permissions, so workflow reproducibility and least privilege could be improved.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10029 grpc-okhttp is vulnerable to Improper Certificate Validation in versions 0.7.0 - 1.68.2 and 1.69.0 - 1.69.0. | 0.7.0 - 1.68.21.69.0 - 1.69.0 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
io.grpc:grpc-api Version 1.84.2 | — | — |
io.grpc:grpc-util Version 1.84.2 | — | — |
io.grpc:grpc-core Version 1.84.2 | — | — |
com.squareup.okio:okio Version 3.4.0 | — | — |
com.google.guava:guava Version 33.6.0-android | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.