Retry a request.
68%
Total Score
caution
The package README says it will be deprecated and points users to gaxios, despite an active linked monorepo.
The package includes a substantial README, and the linked repository has tests, a changelog, and GitHub releases. However, the README explicitly says the package will be deprecated and directs users to gaxios, which is a meaningful adoption concern.
The linked repository does not match the package name and does not mention retry-request in its README, so ownership of this package within the monorepo is not transparent.
All 71 analyzed action references are pinned, 17 workflows use read-only permissions, and no untrusted checkout or script-injection sink was found. The audit missed one of 19 workflows and found two high-confidence low-severity adhoc package installations, so this is a minor hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
extend Version ^3.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.