Error class for Octokit request errors
78%
Total Score
healthy
Healthy release with active maintenance and provenance, tempered by broad GitHub app permissions and entirely unpinned workflow actions.
All six workflows were analyzed, with no untrusted checkouts or script injection, but all 17 action references are unpinned and three high-confidence findings report blanket GitHub app-token permissions. The broad permissions are a caution even without an observed untrusted sink.
| Title | Versions | Severity |
|---|---|---|
CVE-2025-25289 @octokit/request-error is vulnerable to Inefficient Regular Expression Complexity in versions 1.0.0 - 5.1.1 and 6.0.0 - 6.1.7. | 1.0.0 - 5.1.16.0.0 - 6.1.7 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
@octokit/types Version ^18.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.