http-call
make http requests
66%
Total Score
100
100
95
67
Health Score Breakdown
The package has a prepare install-time lifecycle script. This adds build or installation behavior that consumers should account for, although the available signals do not show that it is unsafe.
The package has 62 releases and was historically released frequently, but no registry release has appeared since December 2019. Recent repository activity partly offsets the age of the published release, but does not establish current release cadence.
All five workflows were analyzed, with no untrusted checkout or script-injection findings, but all 17 action references are unpinned and high-confidence findings report blanket GitHub App permissions in release workflows. Those release-process permissions create a meaningful supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 debug Version ^4.1.1 | — | — |
is-stream Version ^2.0.0 | — | — |
parse-json Version ^4.0.0 | — | — |
content-type Version ^1.0.4 | — | — |
tunnel-agent Version ^0.6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 9 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.