An NTLM auth extension to the Axios HTTP library
42%
Total Score
75
79
67
The linked repository is marked archived, which is a severe abandonment signal even though it was pushed recently on September 2, 2026; archived projects should not be expected to receive dependable future maintenance.
The package has 25 releases and a latest release on September 15, 2025, showing substantial history, but it had no releases in the following 12 months and the repository is archived.
Two contributors were active in the last three months, with the leading contributor responsible for two of three commits; this is concentrated but not a single-person project.
The repository has no security policy, leaving reporting and response practices unclear for a library that handles NTLM authentication.
The only workflow was fully analyzed with no untrusted checkout or script injection, but both action references are unpinned and the audit reports a high-severity, low-confidence cache-poisoning pattern; the trusted-publishing finding is informational and does not independently lower the score.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
axios Version ^1.12.2 | — | — |
des.js Version ^1.1.0 | — | — |
js-md4 Version ^0.3.2 | — | — |
dev-null Version ^0.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.