axios-cache-interceptor

Clear documentation and reproducible publishing support day-to-day use. The project relies on one recent contributor, and its workflows use 18 unpinned actions with broad write permissions, so pinning this version is sensible.

Latest 1.12.3

NPM

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

One contributor made 100% of the last three months' commits. With user-owned rather than organization-owned backing, this creates meaningful continuity risk despite recent activity.

Repo commit activity

Eight commits were made in the last three months, but all recent activity came from one active maintainer, limiting the depth of the maintenance base.

Workflow audit

All five workflows were analyzed, but all 18 action references are unpinned and three workflows grant top-level write permissions. The audit also reports high-confidence bot-condition and template-injection hygiene findings; no untrusted checkout or script-injection sink was found, so this is caution rather than a severe standalone risk.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-988529 axios-cache-interceptor is vulnerable to Information Disclosure in versions 0.0.1 - 1.12.2.	0.0.1 - 1.12.2	Low
CVE-2025-69202 axios-cache-interceptor is vulnerable to Use of Cache Containing Sensitive Information in versions 0.0.0 - 1.11.1.	0.0.0 - 1.11.1	Medium

Package versions

Maintainers

hazork

Direct Dependencies

Dependency	Last Release	Score
try Version ^1.0.3	—	—
http-vary Version ^1.0.3	—	—
fast-defer Version ^1.1.9	—	—
object-code Version ^2.0.0	—	—
cache-parser Version ^1.2.6	—	—