GitHub Apps toolset for Node.js
84%
Total Score
83
100
100
83
100
Four commits from two active maintainers in the last 3 months show ongoing work, though the volume is modest for a mature package.
All six workflows were analyzed with no audit findings or untrusted checkout and script-injection sinks. However, all 14 action references are unpinned and two workflows grant top-level write permissions, creating a workflow-hygiene caution without evidence of an exploitable path.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@octokit/core Version ^7.0.7 | — | — |
@octokit/types Version ^17.0.0 | — | — |
@octokit/auth-app Version ^8.3.0 | — | — |
@octokit/webhooks Version ^14.0.0 | — | — |
@octokit/oauth-app Version ^8.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.