follow-redirects

HTTP and HTTPS modules that follow redirects.

Latest 1.16.1

78%

Total Score

healthy

Healthy, supported by a current release and matching, non-archived repository; recent commit activity is currently absent.

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although recent releases and merged pull requests provide some compensating evidence, this is a meaningful maintenance caution.

Workflow audit

The single workflow was fully analyzed and uses read-only permissions, with no untrusted checkout or script-injection findings. However, all five action references are unpinned and the audit found a high-confidence adhoc package installation, creating a modest reproducibility and supply-chain hygiene concern.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-231269 New follow-redirects is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 1.11.0 - 1.16.0.	1.11.0 - 1.16.0	Medium
AIKIDO-2026-154218 New follow-redirects is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 1.16.0 - 1.16.0.	1.16.0 - 1.16.0	Medium
CVE-2024-28849 follow-redirects is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 1.15.5.	0.0.0 - 1.15.5	Medium
CVE-2023-26159 follow-redirects is vulnerable to Improper Input Validation in versions 0.0.0 - 1.15.4.	0.0.0 - 1.15.4	Medium
CVE-2022-0536 follow-redirects is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 1.14.8.	0.0.0 - 1.14.8	Medium