@orval/axios
82%
Total Score
healthy
Frequent releases and active contributors support the package, but unpinned Actions and release-workflow findings reduce supply-chain confidence.
Health Score Breakdown
No build attestation or trusted-publisher provenance is reported, leaving publication origin less transparent than it could be. The active repository and release history provide some compensating evidence.
The repository name does not match @orval/axios and its README does not mention the package, creating some uncertainty about the package-to-repository mapping. The mismatch is consistent with a monorepo sub-package, so this is a limited concern rather than a severe risk.
The audit analyzed all seven workflows without failures, but all 23 action references are unpinned, four workflows grant top-level write permissions, and high-confidence template-injection findings occur in release preparation; trusted-publishing findings also indicate weaker credential handling. The low-confidence cache-poisoning finding is only a minor hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @orval/core Version 8.41.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 3 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.