get-it
Generic HTTP request library for node, browsers and workers
68%
Total Score
caution
Usable with caveats: GitHub Actions expose broad app permissions and an untrusted checkout.
Health Score Breakdown
The audit found high-confidence blanket GitHub App permissions, a template-injection finding in a pull_request_target workflow with an untrusted checkout, and 54 of 60 action uses unpinned. These create a meaningful release-workflow supply-chain concern despite all workflows being analyzed successfully.
Four contributors are active, but one accounts for about 72% of recent commits; organization backing provides some handoff capacity, though activity remains concentrated.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 undici Version ^7.30.0 | — | — |
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 9 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.