Package Health

grpc-okhttp

gRPC: OkHttp

Latest 1.84.2io.grpcMavenMaven

88%

Total Score

healthy

Active, mature project with signed releases; its main weakness is that all 15 workflow actions are unpinned.

Are you affected? Scan for Free

Health Score Breakdown

Repo toolingcaution

The project uses Gradle and Maven, but no security scanning tools were detected. This is a modest transparency and hygiene gap, not evidence of abandonment or unsafe code.

Workflow auditcaution

All four workflows were analyzed with no failed files, dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 15 action references are unpinned and one workflow grants top-level write permissions, so workflow reproducibility and least privilege could be improved.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10029
grpc-okhttp is vulnerable to Improper Certificate Validation in versions 0.7.0 - 1.68.2 and 1.69.0 - 1.69.0.
0.7.0 - 1.68.21.69.0 - 1.69.0
High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
io.grpc:grpc-api
Version 1.84.2
—
—
io.grpc:grpc-util
Version 1.84.2
—
—
io.grpc:grpc-core
Version 1.84.2
—
—
com.squareup.okio:okio
Version 3.4.0
—
—
com.google.guava:guava
Version 33.6.0-android
—
—

Weekly Downloads

Info

Last Published
3 days ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform