Package Health

@octokit/openapi-webhooks-types

Generated TypeScript definitions based on GitHub's OpenAPI spec for api.github.com

Latest 12.2.0NPMNPM

68%

Total Score

caution

Recent maintenance is quiet and CI has broad, unpinned workflow access despite strong release and organization backing.

Health Score Breakdown

Release historycaution

The package has 36 releases over about 2 years and released this version recently, but only 2 releases occurred in the last 12 months, indicating a slower current cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last 3 months. The same-day release and push provide some compensating evidence, but recent maintenance capacity still looks thin.

Repo popularitycaution

The repository has only 7 stars and 3 forks, indicating limited public adoption, but popularity is supporting evidence and does not outweigh the organization backing and release activity.

Workflow auditcaution

All 8 workflows were analyzed, but all 20 action references are unpinned and four high-confidence findings show GitHub app tokens inheriting blanket installation permissions. Two workflows also grant top-level write access, although no untrusted checkout or script-injection sink was found.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
5 days ago
Created
2 years ago
Unpacked Size
2.8 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform